PT-2014-3116

Name of the Vulnerable Software and Affected Versions Shibboleth OpenSAML-Java versions prior to 2.6.1 Description The issue allows remote attackers to conduct XML external entity XXE attacks via a crafted XML DOCTYPE declaration. This is due to the expandEntityReferences property being set to tr...