Ubuntu 20.04 LTS : Shibboleth vulnerability (USN-4925-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4925-1 advisory. Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service provider allowed content injection due to allowing attacker-controlled parameters in error or...

USN-4925-1 shibboleth-sp vulnerability

Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service provider allowed content injection due to allowing attacker-controlled parameters in error or other status pages. An attacker could use this to inject malicious content...

USN-4925-1: Shibboleth vulnerability

Toni Huttunen and Fraktal Oy discovered that the Shibboleth Service provider allowed content injection due to allowing attacker-controlled parameters in error or other status pages. An attacker could use this to inject malicious content...

SUSE: Security Advisory (SUSE-SU-2020:1301-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

DEBIAN-CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

Design/Logic Flaw

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

CVE-2021-28963 affects Shibboleth Service Provider prior to 3.2.1, where template generation uses attacker-controlled parameters, enabling content injection. Multiple connected sources (Red Hat, Ubuntu USN-4925-1, Debian/OSV entries) corroborate the vulnerability and indicate affected deployments...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

CVE-2021-28963: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters...

PT-2021-18003

Name of the Vulnerable Software and Affected Versions: Shibboleth Service Provider versions prior to 3.2.1 Description: The issue allows content injection due to template generation using attacker-controlled parameters. This enables potential attackers to inject malicious content. Recommendations...

Content injection in marked

Versions 0.3.7 and earlier of marked When mangling is disabled via option mangle don't escape target href. This allow attacker to inject arbitrary html-event into resulting a tag...

GHSA-WJMF-58VC-XQJR Content injection in marked

Versions 0.3.7 and earlier of marked When mangling is disabled via option mangle don't escape target href. This allow attacker to inject arbitrary html-event into resulting a tag...

Huawei EulerOS: Security Advisory for mailman (EulerOS-SA-2021-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : mailman (EulerOS-SA-2021-1326)

According to the versions of the mailman package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Cross-site scripting vulnerability in Mailman 2.1.26 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML vi...