CVE-2009-3300

The CVE-2009-3300 issue affects Shibboleth-related components: Identity Provider (IdP) and Service Provider (SP) in Shibboleth environments. Concrete details show multiple cross-site scripting (XSS) vulnerabilities that arise from redirect URLs appearing in automatically generated forms. Affected...