Product · simplesamlphp

simplesamlphp-module-casserver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 4.7

CVE-2025-65954

SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redirect to. casserver treats that url as trusted, and either (dep…

simplesamlphp simplesamlphp-module-casserver simplesamlphp/simplesamlphp-module-casserver Packagist

May 18, 2026