Security Advisory

CVE-2015-20108

9.8
CRITICAL

Vulnerability Description

xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.
Published Date May 27, 2023
Official Source NIST NVD Advisory
Browse More Advisories