CVE 2021-28963
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.
See the
CVE page on Mitre.org
for more details.
Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters.