Skip to content
OpenAdvisories

Package · Packagist

lightsaml/lightsaml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2018-1000165

    LightSAML Incorrect Access Control vulnerability

    LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been …

    lightsaml/lightsaml Packagist