Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors...
7.5CVSS7.4AI score0.01208EPSS
SaveExploits0References1
Veracode•added 2016/12/08 5:22 a.m.•21 views
XML External Entity (XXE)
PySAML2 is vulnerable to XML external entity attacks XXE. The library does not look for SAML XML requests or responses resulting in the ability to attack...
