Unscored DSA-1947-1 1 CVE

opensaml2 shibboleth-sp shibboleth-sp2 - cross-site scripting

Published Dec 7, 2009 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 4

Release	Package	Fixed in
Debian · 4.0	shibboleth-sp	1.3f.dfsg1-2+etch2
Debian · 5.0	opensaml2	2.0-2+lenny2
Debian · 5.0	shibboleth-sp	1.3.1.dfsg1-3+lenny2
Debian · 5.0	shibboleth-sp2	2.0.dfsg1-4+lenny2

Vulnerabilities 1

Unscored —

CVE-2009-3300

Multiple cross-site scripting (XSS) vulnerabilities in the Identity Provider (IdP) 1.3.x before 1.3.4 and 2.x before 2.…

shibboleth-sp Debian

Nov 6, 2009