Debian/shibboleth-sp: critical 9.1
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as stor
Action: Upgrade shibboleth-sp to 3.4.1+dfsg-2+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.4.1+dfsg-2+deb12u1 | - |
Fixed versions
| 3.4.1+dfsg-2+deb12u1 |
Sources
published · modified · JSON