Package · Packagist

simplesamlphp/simplesamlphp-module-infocard

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2017-12874

SimpleSAMLphp InfoCard module Incorrect signature verification

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.

simplesamlphp simplesamlphp simplesamlphp/simplesamlphp-module-infocard Debian Ubuntu Packagist

Sep 1, 2017