PYSEC-2015-41
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/ipsilon/PYSEC-2015-41.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2015-41
- Aliases
-
- CVE-2015-5217
- GHSA-6875-ff47-r6p6
- Withdrawn
- 2024-11-22T04:37:04Z
- Published
- 2015-11-17T15:59:00Z
- Modified
- 2026-06-10T17:01:14.810879359Z
- Summary
- [none]
- Details
-
providers/saml2/admin.py in the Identity Provider (IdP) server in Ipsilon 0.1.0 before 1.0.1 does not properly check permissions to update the SAML2 Service Provider (SP) owner, which allows remote authenticated users to cause a denial of service via a duplicate SP name.
- References
Affected packages
PyPI / ipsilon
Package
- Name
- ipsilon
- View open source insights on deps.dev
- Purl
- pkg:pypi/ipsilon