tocsin

Debian/shibboleth-sp: unknown

Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.1.5, and the Service Provider 1.3.x before 1.3.5 and 2.x before 2.3, in Internet2

Action: Upgrade shibboleth-sp to 3.0.2+dfsg1-2 or later.

Affected

introducedfixedlast affected
03.0.2+dfsg1-2-

Fixed versions

3.0.2+dfsg1-2

Sources

published · modified · JSON