Lucene search

K
osvGoogleOSV:USN-4925-1
HistoryApr 22, 2021 - 11:01 p.m.

shibboleth-sp vulnerability

2021-04-2223:01:39
Google
osv.dev
5
shibboleth sp
content injection
vulnerability
parameters
malicious content
security

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

58.7%

Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service
provider allowed content injection due to allowing attacker-controlled
parameters in error or other status pages. An attacker could use this to
inject malicious content.

AI Score

6.9

Confidence

Low

EPSS

0.002

Percentile

58.7%