Security Advisory

CVE-2021-27736

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-04-22 13:14:54

Last updated 2024-08-03 21:26:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers.DocumentBuilderFactory unsafely.

← Browse all CVEs View on cve.org ↗