xml_security.rb in the ruby-saml gem... CVE-2015-20108

- AV AC AU C I A
发布: 2023-05-27
修订: 2023-06-05

xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息