ipsilon-project ipsilon vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

The default configuration of the Jinja templating engine used in the Identity Provider (IdP) server in Ipsilon 0.1.0 prior to 1.0.1 does not enable auto-escaping, which makes it easier for remote malicious users to conduct cross-site scripting (XSS) attacks via template variables...

Ipsilon-project Ipsilon

4.3

CVSSv2

The Identity Provider (IdP) server in Ipsilon 0.1.0 prior to 1.0.1 does not properly escape certain characters in a Python exception-message template, which makes it easier for remote malicious users to conduct cross-site scripting (XSS) attacks via an HTTP response.

Ipsilon-project Ipsilon

4

CVSSv2

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 prior to 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.

Ipsilon Project Ipsilon 0.3.0 Ipsilon Project Ipsilon 0.1.0 Ipsilon Project Ipsilon 0.4.0 Ipsilon Project Ipsilon 0.5.0 Ipsilon Project Ipsilon 0.6.0 Ipsilon Project Ipsilon 1.0.0

5.5

CVSSv2

providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 prior to 1.0.2 and 1.1.x prior to 1.1.1 does not properly check permissions, which allows remote authenticated users to cause a denial of service by deleting a SAML2 Service Provider (SP).

Ipsilon Project Ipsilon 0.4.0 Ipsilon Project Ipsilon 0.5.0 Ipsilon Project Ipsilon 0.6.0 Ipsilon Project Ipsilon 1.1.0 Ipsilon Project Ipsilon 1.0.0 Ipsilon Project Ipsilon 1.0.1 Ipsilon Project Ipsilon 0.1.0 Ipsilon Project Ipsilon 0.3.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook