Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Shibboleth Subscribe
Filtered by product Oidc Op
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-24129 1 Shibboleth 1 Oidc Op 2022-02-09 6.4 MEDIUM 8.2 HIGH
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services.