Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:3092
HistoryDec 08, 2016 - 5:22 a.m.

XML External Entity (XXE)

2016-12-0805:22:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3

0.004 Low

EPSS

Percentile

72.1%

PySAML2 is vulnerable to XML external entity attacks (XXE). The library does not look for SAML XML requests or responses resulting in the ability to attack.

CPENameOperatorVersion
pysaml2le4.4.0