vulnerability
Ubuntu: USN-4925-1 (CVE-2021-28963): Shibboleth vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:N/C:N/I:P/A:N) | Mar 22, 2021 | Apr 23, 2021 | Mar 22, 2023 |
Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Mar 22, 2021
Added
Apr 23, 2021
Modified
Mar 22, 2023
Description
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
Solution(s)
ubuntu-upgrade-libapache2-mod-shibubuntu-upgrade-libshibsp-pluginsubuntu-upgrade-libshibsp8ubuntu-upgrade-shibboleth-sp-commonubuntu-upgrade-shibboleth-sp-utils
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.