{"id":"DSA-1947-1","summary":"opensaml2 shibboleth-sp shibboleth-sp2 - cross-site scripting","modified":"2026-03-09T01:22:59.946106Z","published":"2009-12-07T00:00:00Z","upstream":["CVE-2009-3300","DEBIAN-CVE-2009-3300"],"affected":[{"package":{"name":"shibboleth-sp","ecosystem":"Debian:4.0","purl":"pkg:deb/debian/shibboleth-sp?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3f.dfsg1-2+etch2"}]}],"versions":["1.3f.dfsg1-2","1.3f.dfsg1-2+etch1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1947-1.json"}},{"package":{"name":"opensaml2","ecosystem":"Debian:5.0","purl":"pkg:deb/debian/opensaml2?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0-2+lenny2"}]}],"versions":["2.0-2","2.0-2+lenny1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1947-1.json"}},{"package":{"name":"shibboleth-sp2","ecosystem":"Debian:5.0","purl":"pkg:deb/debian/shibboleth-sp2?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.dfsg1-4+lenny2"}]}],"versions":["2.0.dfsg1-4","2.0.dfsg1-4+lenny1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1947-1.json"}},{"package":{"name":"shibboleth-sp","ecosystem":"Debian:5.0","purl":"pkg:deb/debian/shibboleth-sp?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.1.dfsg1-3+lenny2"}]}],"versions":["1.3.1.dfsg1-3","1.3.1.dfsg1-3+lenny1","1.3.1.dfsg1-3+lenny1~bpo40+1","1.3.1.dfsg1-3+lenny2~bpo40+1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/dsa-osv/DSA-1947-1.json"}}],"schema_version":"1.7.3"}