cbcvebase.

Shibboleth Oidc Op vulnerabilities

1 known vulnerability affecting shibboleth/oidc_op.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2022-24129P2HIGHCVSS 8.2PoCfixed in 3.0.42022-02-04
CVE-2022-24129 [HIGH] CWE-918 CVE-2022-24129: The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services.
nvd
Shibboleth Oidc Op vulnerabilities | cvebase