Description
In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.
Unscored
CVE-2021-37154
EUVD-2021-23728GHSA-xqvg-mhw9-7644
In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0…
Published Aug 25, 2021 · Updated Aug 4, 2024 · Assigned by mitre