FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

security/shibboleth-idp -- CAS service SSRF

Affected packages
4.3.0 <= shibboleth-idp < 4.3.2
5.0.0 <= shibboleth-idp < 5.1.1


VuXML ID 7a7129ef-e790-11ee-a1c0-0050569f0b83
Discovery 2024-03-20
Entry 2024-03-21

Shibboleth Developers report:

The Identity Provider's CAS support relies on a function in the Spring Framework to parse CAS service URLs and append the ticket parameter.