Skip to content
OpenAdvisories

Vendor

simplesamlphp

16 known vulnerabilities.

Products

simplesamlphp 5 saml2 4 xml-security 2 simplesamlphp-module-casserver 2 xml-common 1 simplesamlphp-module-openid 1 simplesamlphp-module-openidprovider 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.3
    CVE-2024-52806 Public exploit

    SimpleSAMLphp SAML2 has an XXE in parsing SAML messages

    SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18.

    simplesamlphp saml2 simplesamlphp simplesamlphp Debian Ubuntu Packagist