CVE-2018-20857

CVE-2018-20857 concerns Zendesk Samlr prior to 2.6.2, which is vulnerable to an XML nodes comment attack in a name_id node (example: [email protected] followed by ). The attack sequence could append the attacker’s domain name. Public references from Red Hat, GitHub, OSV, and Veracode describe this...