CVE

CVE-2022-24129

8.2

CVSS

Description

The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP services.

Attack Vector

Privileges Req.

User Interaction

Updated Sep 26, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2022-24129 Scanner

Detects 'Server-Side-Request-Forgery (SSRF)' vulnerability in OIDC OP plugin for Shibboleth Identity Provider affects v. before 3.0.4.

Used 3.4k times · 3.3k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →