{"action":"Upgrade org.opensaml:opensaml to 2.6.1 or later.","affected":[{"fixed":"2.6.1","introduced":"0"}],"component":"org.opensaml:opensaml","cve_ids":["CVE-2013-6440"],"ecosystem":"Maven","epss":0.02752,"exploited":false,"fixed_versions":["2.6.1"],"ghsa_id":"GHSA-v723-58jv-2qc4","id":"tcs_01M5N9DGA7MVB1BK53SCK1VD3F","modified_at":"2024-12-05T05:43:44.128655Z","published_at":"2022-05-13T01:04:00Z","references":["https://osv.dev/vulnerability/GHSA-v723-58jv-2qc4","https://nvd.nist.gov/vuln/detail/CVE-2013-6440","https://bugzilla.redhat.com/show_bug.cgi?id=1043332","https://www.oracle.com/security-alerts/cpujan2022.html","http://blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml","http://rhn.redhat.com/errata/RHSA-2014-0170.html","http://rhn.redhat.com/errata/RHSA-2014-0171.html","http://rhn.redhat.com/errata/RHSA-2014-0172.html","http://rhn.redhat.com/errata/RHSA-2014-0195.html","http://shibboleth.net/community/advisories/secadv_20131213.txt"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v723-58jv-2qc4","url":"https://osv.dev/vulnerability/GHSA-v723-58jv-2qc4"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML"}