Approved changes feed: RSS · Atom

cpe:2.3:a:zendesk:samlr:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorZendesk (aed17230-9556-5308-b887-24f2ecaa4cca)
ProductSamlr (f762b5ce-26d9-5be9-b092-de28a3f5303a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gem/samlr purl2cpe 2026-06-01 10:17:43.125590
pkg:github/zendesk/samlr purl2cpe 2026-06-01 10:17:43.125593

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-20857 vulnerable 2026-06-08 05:11:28.171452 Details available
Zendesk Samlr before 2.6.2 allows an XML nodes comment attack such as a name_id node with user@example.com followed by <!---->. and then the attacker's domain name.
Published: 2019-07-26T11:41:03.000Z
Updated: 2024-08-05T12:12:29.361Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.