10 matches found
VulnCheck KEV: CVE-2023-36661
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows...
7.5CVSS5.8AI score0.03055EPSS
SaveIn wildExploits3References2
20