Pysaml2 Security Vulnerabilities and Issues — Pysaml2 CVE List

Lucene search

Pysaml2 ProjectPysaml2

3 matches found

CVE•added 2017/03/24 2:59 p.m.•85 views

CVE-2016-10149

XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

7.5CVSS7.3AI score0.01774EPSS

CVE•added 2017/03/03 3:59 p.m.•72 views

CVE-2016-10127

PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.

9CVSS8.7AI score0.00778EPSS

CVE•added 2017/11/17 4:29 a.m.•72 views

CVE-2017-1000246

Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.

5.3CVSS5.2AI score0.00122EPSS