Shibboleth

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Shibboleth records in CISA KEV

No Shibboleth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Service Provider 7 records HIGH Identity Provider 3 records LOW Opensaml 3 records LOW Opensaml Java 2 records LOW Xmltooling-c 2 records LOW Oidc Op 1 record MEDIUM Shibboleth-identity-provider 1 record LOW Shibboleth-sp 1 record LOW

Records

1 record in Oidc Op · all components

TI-2022-08074 CVE-2022-24129 · GHSA-pw72-xm42-hr32

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side…

MEDIUM 45

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.06139 Published 2022-02-04 No fix listed CWE-918

Open these records in search →

Critical	1
High	9
Medium	10
Low	0
No CVSS	0