Lucene search

K
cvelistMitreCVELIST:CVE-2021-28963
HistoryMar 22, 2021 - 7:02 a.m.

CVE-2021-28963

2021-03-2207:02:05
mitre
www.cve.org
4
shibboleth
service provider
vulnerability
template generation
content injection
attacker-controlled parameters

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.7%

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

58.7%