Plugin icon

Shibboleth

shibboleth

Vulnerabilities:

2

Last Updated:

June 22, 2026

Active Installs:

3000

Published
Title
Fixed in
CVSS
Published
2026-06-24
Title
Shibboleth < 2.5.4 - Unauthenticated Administrator Account Creation via Identity Header Spoofing
Fixed in
Fixed in 2.5.4
CVSS
8.1 (high)
Published
2016-03-02
Title
Shibboleth <= 1.7 - Cross-Site Scripting (XSS)
Fixed in
Fixed in 1.8
CVSS
6.1 (medium)