Skip to content
OpenAdvisories

Package · Packagist

simplesamlphp/simplesamlphp

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.0
    CVE-2020-5301

    Information disclosure of source code in SimpleSAMLphp

    SimpleSAMLphp versions before 1.18.6 contain an information disclosure vulnerability. The module controller in `SimpleSAML\Module` that processes requests for pages hosted by modules, has code to identify paths ending with `.php` and process those as PHP code…

    simplesamlphp simplesamlphp simplesamlphp/simplesamlphp Packagist
  • Low 3.7
    GHSA-2r3v-q9x3-7g46

    Link injection in SimpleSAMLphp

    ### Background Several scripts part of SimpleSAMLphp display a web page with links obtained from the request parameters. This allows us to enhance usability, as the users are presented with links they can follow after completing a certain action, like logging…

    simplesamlphp/simplesamlphp Packagist