Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Niif Component: Shibboleth Authentication Clear all filters
TI-2015-04643 CVE-2015-5513 · GHSA-5rgh-fvf3-hjmm

Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x…

Priority LOW 14

Cross-site scripting (XSS) vulnerability in the Shibboleth authentication module 6.x-4.x before 6.x-4.2 and 7.x-4.x before 7.x-4.2 for Drupal allows remote authenticated users with the "Administer blocks" permission to i…

CVSS 2.0LOW 2.1 Network Low privileges Interaction — EPSS 0.01473 Published 2015-08-18 No fix listed CWE-79
TI-2015-02986 CVE-2015-3375 · GHSA-cxx7-f5xv-cvff

Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module…

Priority LOW 27

Cross-site request forgery (CSRF) vulnerability in the Shibboleth Authentication module before 6.x-4.1 and 7.x-4.x before 7.x-4.1 for Drupal allows remote attackers to hijack the authentication of administrators for requ…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.00643 Published 2015-04-21 No fix listed CWE-352