Pysaml2@* Security Vulnerabilities and Issues — Pysaml2@* CVE List

Lucene search

Pysaml2 ProjectPysaml2*

2 matches found

CVE•added 2017/03/24 2:59 p.m.•85 views

CVE-2016-10149

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

7.5CVSS7.3AI score0.01774EPSS

CVE•added 2017/11/17 4:29 a.m.•72 views

CVE-2017-1000246

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.

5.3CVSS5.2AI score0.00122EPSS