Filtered by vendor Shibboleth
Subscriptions
Filtered by product Oidc Op
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-24129 | 1 Shibboleth | 1 Oidc Op | 2024-08-03 | 8.2 High |
| The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services. | ||||
Page 1 of 1.