Skip to content
OpenAdvisories
High USN-8770-1 3 CVEs

simplesamlphp vulnerabilities

Published Sep 15, 2026 · Updated Sep 16, 2026

Ecosystem: Ubuntu

Summary

It was discovered that SimpleSAMLphp incorrectly validated cryptographic
signatures in XML messages. An authenticated attacker could possibly use
this issue to impersonate users or gain elevated privileges. This issue
only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2019-3465)

It was discovered that SimpleSAMLphp incorrectly handled external entities
when parsing untrusted XML documents. A remote attacker could possibly use
this issue to obtain sensitive information. This issue did not affect
Ubuntu 24.04 LTS. (CVE-2024-52596)

It was discovered that SimpleSAMLphp incorrectly verified signatures in
SAML messages using the HTTP-Redirect binding. A remote attacker could
possibly use this issue to bypass authentication and impersonate users.
(CVE-2025-27773)

Fixed packages 5

ReleasePackageFixed in
Ubuntu · 24.04 LTS 24.04:LTS simplesamlphp 1.19.7-1+deb12u1ubuntu0.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS simplesamlphp 1.14.0-1ubuntu2+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS simplesamlphp 1.15.3-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS simplesamlphp 1.18.4-1ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS simplesamlphp 1.19.1-1.1ubuntu0.1~esm1

Vulnerabilities 3

  • High 8.8
    CVE-2019-3465

    Signature validation bypass in XmlSecLibs

    Rob Richards XmlSecLibs, all versions prior to v3.0.3, as used for example by SimpleSAMLphp, performed incorrect validation of cryptographic signatures in XML messages, allowing an authenticated attacker to impersonate others or elevate privileges by creating…

    simplesamlphp simplesamlphp robrichards/xmlseclibs Debian Ubuntu Packagist
  • High 8.8
    CVE-2024-52596

    SimpleSAMLphp xml-common XXE vulnerability

    SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0.

    simplesamlphp xml-common simplesamlphp simplesamlphp Debian Ubuntu Packagist
  • High 8.6
    CVE-2025-27773

    SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding

    The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect bi…

    simplesamlphp saml2 simplesamlphp simplesamlphp Debian Ubuntu Packagist

References

  • report
    https://ubuntu.com/security/CVE-2019-3465
  • report
    https://ubuntu.com/security/CVE-2024-52596
  • report
    https://ubuntu.com/security/CVE-2025-27773