CVE-2022-24129

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri…

published February 4, 2022

CVSS
—
EPSS
6%
Percentile
93.4
In the wild
Unconfirmed
What it is

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06139 · 93.4th percentile
Published
2022-02-04T19:20Z
EPSS history
Timeline
  • 04 FEB 19:20Z
    The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri…
    cvelistv5