Hi, I was not able to find the proper topic where to ask this question, as from this page OpenSAML - Confluence (atlassian.net) I was redirected here but OpenSaml is not present in your topic list.
I was able to reproduce the vulnerability on OpenSaml 3.3.0.
This article describes the vulnerability https://www.usenix.org/system/files/conference/usenixsecurity12/sec12-final91-8-23-12.pdf.