CVE-2018-20857

2019-07-2612:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.9%

JSON

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with [email protected] followed by . and then the attacker’s domain name.

CPENameOperatorVersion
samlreq0.2.2
samlreq1.1.0
samlreq1.1.1
samlreq0.0.11
samlreq0.0.3
samlreq2.0.1
samlreq1.1.2
samlreq0.0.9
samlreq2.0.3
samlreq2.4.0