Lucene search
+L

2 matches found

RubySec
RubySec
•added 2019/07/31 12:00 a.m.•33 views

samlr XML nodes comment attack

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...

7.5CVSS2.7AI score0.01205EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/07/26 12:00 a.m.•3 views

CVE-2018-20857: Improper Input Validation

Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a nameid node with [email protected] followed by . and then the attacker's domain name...

7.5CVSS5.8AI score0.01205EPSS
SaveExploits0References2
Rows per page
Query Builder