Threats tagged 'ghsa-p7fp-v35q-pm7j'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.4%	CVE-2025-9943An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of Critical9.1EPSS 0.4%2025-09-10GCVE DatabaseCVE-2025-9943 An SQL injection vulnerability exists in the "ID" attribute of the SAML response in Shibboleth Service Provider versions through 3.5.0 when the replay cache is configured to use an SQL database with the ODBC plugin. This allows an unauthenticated attacker to perform blind SQL injection and extract arbitrary data from the database. The flaw is due to insufficient escaping of single quotes in the SQLString class in the odbc-store.cpp source file. EPSS 0.4%Report on CVE-2025-9943 Vulnerability CWE-89 #ghsa-p7fp-v35q-pm7j	GCVE Database	2025-09-10

Page 1 of 1