The Atlassian Community Forums are currently in read-only mode. We will be relaunching on a new platform on September 22 (read more here). We apologize for the extended downtime. For concerns or questions, please email communitymanagers@atlassian.com. See you on the other side, on the new Atlassian Community Forums! :)

×

Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Is OpenSaml 4.x vulnerable to XSW attack ?

Gerri
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
May 31, 2022

Hi, I was not able to find the proper topic where to ask this question, as from this page OpenSAML - Confluence (atlassian.net) I was redirected here but OpenSaml is not present in your topic list.

I was able to reproduce the vulnerability on OpenSaml 3.3.0.

This article describes the vulnerability  https://www.usenix.org/system/files/conference/usenixsecurity12/sec12-final91-8-23-12.pdf.

 

0 comments

Comments for this post are closed

Community moderators have prevented the ability to post new comments.

TAGS
AUG Leaders

Atlassian Community Events