Search for packages
| purl | pkg:deb/debian/simplesamlphp@1.19.0-1 |
| Next non-vulnerable version | 1.19.7-1+deb12u2 |
| Latest non-vulnerable version | 1.19.7-1+deb12u2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4ghf-nbrc-m7e2
Aliases: CVE-2024-52806 GHSA-pxm4-r5ph-q2m2 |
SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 4.6.14 and 5.0.0-alpha.18. |
Affected by 0 other vulnerabilities. |
|
VCID-8qrc-1cx7-zuac
Aliases: CVE-2024-52596 GHSA-2x65-fpch-2fcm |
SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0. |
Affected by 0 other vulnerabilities. |
|
VCID-fqhw-vnhk-j7fu
Aliases: CVE-2025-27773 GHSA-46r4-f8gj-xg56 |
The SimpleSAMLphp SAML2 library is a PHP library for SAML2 related functionality. Prior to versions 4.17.0 and 5.0.0-alpha.20, there is a signature confusion attack in the HTTPRedirect binding. An attacker with any signed SAMLResponse via the HTTP-Redirect binding can cause the application to accept an unsigned message. Versions 4.17.0 and 5.0.0-alpha.20 contain a fix for the issue. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-cv34-tryp-13cd | security update |
CVE-2019-3465
GHSA-pqm6-cgwr-x6pf |
| VCID-uuud-qxr7-4qhh | Log injection in SimpleSAMLphp |
CVE-2020-5225
GHSA-6gc6-m364-85ww |
| VCID-vxbq-9k5c-4uf5 | Cross-site scripting in SimpleSAMLphp |
CVE-2020-5226
GHSA-mj9p-v2r8-wf8w |