CVE-2022-24129

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery SSRF due to insufficient restriction of the requesturi parameter. This allows attackers to interact with arbitrary third-party HTTP services...

PT-2015-7854

Name of the Vulnerable Software and Affected Versions Ipsilon versions 0.1.0 through 1.0.0 Description The issue is related to the providers/saml2/admin.py file in the Identity Provider IdP server, where it does not properly check permissions to update the SAML2 Service Provider SP owner. This...