1 matches found
GHSA-M69X-PW9P-7J3Q Spring Security SAML2 Service Provider: Unbounded writer inflates the compressed SAML payload into memory (DoS)
An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2.0 Login or Logout may be vulnerable to a denial of service by way of an unbounded writer that inflates the compressed SAML payload into memory. Affected versions: Spring Security 5.7.0 through 5.7.23;...
7.5CVSS4.7AI score0.00331EPSS
SaveExploits0References5
20