PYSEC-2017-67

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

Xxe

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

django-saml2-auth (>=1.0.2b1, <=1.1.4), django-saml2-auth-custom (>=1.0.0, <=1.0.4) +4 more potentially affected by CVE-2016-10127 via pysaml2 (>=4.0.2, <=4.4.0)

pysaml2 PYPI version =4.0.2, =1.0.2b1, =1.0.0, =12.0.2, =0.6.1, =3.4.8 Source cves: CVE-2016-10127 Source advisory: MEND:CVE-2016-10127...

CVE-2016-10127

CVE-2016-10127 affects PySAML2 and is an XML External Entity (XXE) vulnerability in SAML XML processing. The issue arises from how the library parses crafted SAML requests/responses, enabling potential data disclosure or other XXE consequences as described in connected sources. The CVE entry also...

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

CVE-2016-10127: Improper Restriction of XML External Entity Reference

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

SUSE-SU-2017:0569-1 Security update for python-pysaml2

This update for python-pysaml2 fixes the following issues: - CVE-2016-10127 and CVE-2016-10149: XXE XML external entity issues were fixed in python-pysaml2, where external requests to other XML content could be made by parsing XML files using this SAML2 library. bsc1019074 To fix this bug, the ne...

Debian DSA-3759-1 : python-pysaml2 - security update

Matias P. Brutti discovered that python-pysaml2, a Python implementation of the Security Assertion Markup Language 2.0, did not correctly sanitize the XML messages it handled. This allowed a remote attacker to perform XML External Entity attacks, leading to a wide range of exploits. %NASLMINLEVEL...

python-pysaml2 XML External Entity Injection Vulnerability

python-pysaml2 is an implementation of SAML2 written in python. An XML external entity injection vulnerability exists in python-pysaml2. An attacker could use this vulnerability to gain access to sensitive information or cause a denial of service...

[SECURITY] [DSA 3759-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3759-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 12, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3759-1] python-pysaml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3759-1 [email protected] https://www.debian.org/security/ Sebastien Delafond January 12, 2017 https://www.debian.org/security/faq -...

Debian Security Advisory DSA 3759-1 (python-pysaml2 - security update)

Matias P. Brutti discovered that python-pysaml2, a Python implementation of the Security Assertion Markup Language 2.0, did not correctly sanitize the XML messages it handled. This allowed a remote attacker to perform XML External Entity attacks, leading to a wide range of exploits. OpenVAS...

PT-2017-7752

Name of the Vulnerable Software and Affected Versions PySAML2 affected versions not specified Description The issue allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response. Recommendations At the moment, there is no information about a newer...

PT-2017-7771

Name of the Vulnerable Software and Affected Versions PySAML2 versions 4.4.0 and earlier Description The issue allows remote attackers to read arbitrary files via a crafted SAML XML request or response. This is due to an XML External Entity XXE vulnerability. Recommendations For PySAML2 versions...

DSA-3759-1 python-pysaml2 - security update

Bulletin has no description...

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity XXE attacks via a crafted SAML XML request or response...

Debian: Security Advisory (DSA-3759-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...