Picketlink
Approved changes feed: RSS · Atom
cpe:2.3:a:red_hat:picketlink:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Red Hat (a3686528-5679-55c9-b393-abe45df26bd2) |
|---|---|
| Product | Picketlink (09bbae26-ec04-52a1-9b10-aa7ec18b7ead) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3873 |
vulnerable | 2026-06-08 05:13:56.261146 |
Details available
MEDIUM (6.4)
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
Published: 2019-06-12T13:43:46.000Z
Updated: 2024-08-04T19:19:18.682Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3872 |
vulnerable | 2026-06-08 05:13:56.258621 |
Details available
MEDIUM (5.4)
It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.
Published: 2019-06-12T13:45:56.000Z
Updated: 2024-08-04T19:19:18.614Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.