logo

Database

XML injection (XXE) In ruby-saml

Description

XXE vulnerability

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. GCVE-OSVDB-124383

References

1. https://github.com/onelogin/ruby-saml/commit/a2e5318530701bf14528c5b3b51c880b3499a75d2. https://github.com/onelogin/ruby-saml/pull/247

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.