CVE-2018-20857

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...

PT-2019-10284

Name of the Vulnerable Software and Affected Versions: Zendesk Samlr versions prior to 2.6.2 Description: The issue allows an XML nodes comment attack, where an attacker can manipulate the name id node by including a comment followed by the attacker's domain name, potentially allowing for malicio...

CVE-2018-20857: Improper Input Validation

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...