CVSS v3
7.5
HIGH
EPSS Score
60.7%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element. (This is fixed in, for example, Shibboleth Service Provider 3.4.1.3 on Windows.)
Active exploitation of CVE-2023-36661 has not been confirmed. The EPSS score is 60.7%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2023-36661 has a CVSS v3 base score of 7.5 (HIGH severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).