Fusionauth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fusionauth records in CISA KEV

No Fusionauth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fusionauth 2 records MEDIUM Saml V2 1 record LOW Samlv2 1 record MEDIUM

Records

1 record in Saml V2 · all components

TI-2021-09145 CVE-2021-27736 · GHSA-3jw3-99x8-h6xc

FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or…

LOW 32

FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers.DocumentBuilderFactory unsafely.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01316 Published 2021-04-22 No fix listed CWE-611

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0