Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.0166·Published 2018-07-24·Fixed in 1.2.7CWE-287