CVE-2016-1000253
onelogin/php-saml signature wrapping attacks
Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.
What each source reports
GitHub AdvisoriesGHSA-g48f-pgwh-wwxx No score
onelogin/php-saml signature wrapping attacks
Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.
- Record
GHSA-g48f-pgwh-wwxx- Updated
- 2026-11-02
OSVGHSA-g48f-pgwh-wwxx No score
onelogin/php-saml signature wrapping attacks
Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.
- Record
GHSA-g48f-pgwh-wwxx- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
onelogin/php-samlPackagist |
before 2.10.0 | 2.10.0 |
onelogin/php-samlPackagist |
before 2.10.0, plus listed versions 2.0.02.1.02.3.02.4.02.5.0 Show 6 moreShow less2.6.02.6.12.7.02.8.02.9.02.9.1 |
2.10.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2016-1000253 is a vulnerability with no CVSS score yet in onelogin/php-saml, published May 17, 2024. No source lists public exploit code. Fixed in onelogin/php-saml 2.10.0.