CVE-2021-27736

2021-04-2214:15:09

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers.DocumentBuilderFactory unsafely.

CPENameOperatorVersion
fusionauth-samlv2eq0.2.2
fusionauth-samlv2eq0.5.2
fusionauth-samlv2eq0.5.3
fusionauth-samlv2eq0.2.3
fusionauth-samlv2eq0.3.5
fusionauth-samlv2eq0.3.1
fusionauth-samlv2eq0.3.3
fusionauth-samlv2eq0.3.0
fusionauth-samlv2eq0.2.0
fusionauth-samlv2eq0.3.4

Name	Operator	Version
fusionauth-samlv2	eq	0.2.2
fusionauth-samlv2	eq	0.5.2
fusionauth-samlv2	eq	0.5.3
fusionauth-samlv2	eq	0.2.3
fusionauth-samlv2	eq	0.3.5
fusionauth-samlv2	eq	0.3.1
fusionauth-samlv2	eq	0.3.3
fusionauth-samlv2	eq	0.3.0
fusionauth-samlv2	eq	0.2.0
fusionauth-samlv2	eq	0.3.4