Every CVE Search/ Get API key

CVE-2023-36661

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows...

7.5 HighPublic exploitFix available

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.89%Up 2.8 points since Jun 26, 2023
90%50%10%1%

What each source reports

NVD Score used 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
CVE-2023-36661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-918
Updated
2026-11-02
CVE List 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
CVE-2023-36661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-918
Updated
2026-11-02
EUVDEUVD-2023-40605 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
EUVD-2023-40605
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j522-236p-wx5g 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows...

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
GHSA-j522-236p-wx5g
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-918
Updated
2026-11-02
OSV 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
CVE-2023-36661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-36661 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
DEBIAN-CVE-2023-36661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2023-36661 7.5

Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)

Record
UBUNTU-CVE-2023-36661
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVSUSE-SU-2023:2766-1 No score

Security update for xmltooling

This update for xmltooling fixes the following issues:

  • CVE-2023-36661: Fixed a server-side-request-forgery (SSRF) vulnerability (bsc#1212359).
Record
SUSE-SU-2023:2766-1
Updated
2026-11-02
OSVSUSE-SU-2023:2975-1 No score

Security update for xmltooling

This update for xmltooling fixes the following issues:

  • CVE-2023-36661: Fixed a server-side-request-forgery (SSRF) vulnerability (bsc#1212359).
Record
SUSE-SU-2023:2975-1
Updated
2026-11-02
OSVSUSE-SU-2023:3089-1 No score

Security update for xmltooling

This update for xmltooling fixes the following issues:

  • CVE-2023-36661: Fix server-side request forgery vulnerability (bsc#1212359)
Record
SUSE-SU-2023:3089-1
Updated
2026-11-02
OSVUSN-6274-1 No score

xmltooling vulnerability

Jurien de Jong discovered that XMLTooling did not properly handle certain KeyInfo element content within an XML signature. An attacker could possibly use this issue to achieve server-side request forgery.

Record
USN-6274-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xmltooling
Debian:12
 before 3.2.3-1+deb12u1, plus listed versions
3.2.3-1
3.2.3-1+deb12u1
xmltooling
Debian:13
 before 3.2.4-1
3.2.4-1
xmltooling
Debian:14
 before 3.2.4-1
3.2.4-1
xmltooling
Debian:10
 before 3.0.4-1+deb10u2, plus listed versions
3.0.4-13.0.4-1+deb10u13.0.4-1+deb10u1~bpo9+1
3.0.4-1+deb10u2
xmltooling
Debian:11
 before 3.2.0-3+deb11u1, plus listed versions
3.2.0-3
3.2.0-3+deb11u1
xmltooling
openSUSE:Leap 15.4
 before 1.6.4-150000.3.10.1
1.6.4-150000.3.10.1
xmltooling
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 1.5.6-3.13.1
1.5.6-3.13.1
xmltooling
SUSE:Linux Enterprise Server 12 SP5
 before 1.5.6-3.13.1
1.5.6-3.13.1
xmltooling
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 1.5.6-3.13.1
1.5.6-3.13.1
xmltooling
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
Show 17 moreShow less
Affected packages
PackageAffectedFixed
xmltooling
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Linux Enterprise Real Time 15 SP3
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Manager Proxy 4.2
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Manager Server 4.2
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
SUSE:Enterprise Storage 7.1
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
openSUSE:Leap 15.4
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
openSUSE:Leap 15.5
 before 3.1.0-150300.3.3.1
3.1.0-150300.3.3.1
xmltooling
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.5.3-21.5.3-2+deb8u1build0.14.04.11.5.3-2+deb8u2build0.14.04.11.5.3-2+deb8u3build0.14.04.11.5.3-2+deb8u3ubuntu0.1
 None known
xmltooling
Ubuntu:Pro:16.04:LTS
 before 1.5.6-2ubuntu0.3+esm1, plus listed versions
1.5.3-2.1ubuntu21.5.6-11.5.6-21.5.6-2ubuntu0.11.5.6-2ubuntu0.21.5.6-2ubuntu0.3
1.5.6-2ubuntu0.3+esm1
xmltooling
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.6.0-51.6.0-5build11.6.2-11.6.3-11.6.4-1ubuntu21.6.4-1ubuntu2.1
 None known
xmltooling
Ubuntu:20.04:LTS
 All versions, plus listed versions
3.0.4-13.0.5-13.0.5-1build1
 None known
xmltooling
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.2.0-3ubuntu13.2.1-1ubuntu2
 None known
xmltooling
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.2.4-13.2.4-23.2.4-2.1build23.2.4-2.1build3
 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
MetasploitIvanti Connect Secure Unauthenticated Remote Code Execution2024-01-31

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, Metasploit, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-36661 is a high vulnerability (CVSS 7.5) in Shibboleth Xmltooling, published June 18, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.89%, the 86th percentile. Fixed in xmltooling 3.2.3-1+deb12u1.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open