Shibboleth Oidc Op vulnerabilities

1 vulnerability

Known vulnerabilities in Shibboleth Oidc Op, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.2CVE-2022-24129shibbolethoidc_op
EPSS score
6.14%
The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services.