PT-2018-13754

Name of the Vulnerable Software and Affected Versions Microsoft ADFS versions prior to 4.0 on Windows Server 2016 and previous Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It can be exploited via the txtBoxEmail parameter in the "/adfs/ls" API endpoint...

CVE-2018-16794: Server-Side Request Forgery (SSRF)

Microsoft ADFS 4.0 Windows Server 2016 and previous Active Directory Federation Services has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls...