Login Request a demo
OO
Product
Oidc OP
by Shibboleth · last CVE Feb 4, 2022
1
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities1In the news0Timeline
Severity mix
Critical 0High 1Medium 0Low 0
Severity
All severities1Critical0High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Oidc OP to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-24129
8.2
6%
Feb 4
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter
Affected: before 3.0.4
Showing 1