Date: Tue, 10 Jan 2017 08:29:39 +0100 From: Sébastien Delafond <seb@...ian.org> To: oss-security@...ts.openwall.com Cc: cve-assign@...re.org Subject: CVE request: python-pysaml2 XML external entity attack Hello, the Debian security team would like to request a CVE for an XML XEE discovered in python-pysaml2 by Matias P. Brutti; python-pysaml2 does not sanitize SAML XML requests or responses: https://github.com/rohe/pysaml2/issues/366 https://github.com/rohe/pysaml2/pull/379 https://bugs.debian.org/850716 Cheers, --Seb
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.