CVE-2015-20108
ruby-saml: xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared...
CVE-2015-20108 is fixed in ruby-saml on 1 platform by DEBIAN-CVE-2015-20108 (version 1.0.0-1), released May 27, 2023. It is not reported as exploited. Patch Radar priority: Urgent.
Urgent
CVSS
9.8
critical
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0133
71st percentile
xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| ruby-saml · Debian 12.15 (bookworm) | 1.0.0-1 | DEBIAN-CVE-2015-20108 | May 27, 2023 |