simplesamlphp vulnerabilities (Debian)
30 vulnerabilities.
-
simplesamlphpDebian SimpleSAMLphp SP accepts a response from an unexpected IdP when unsigned `Response/InResponseTo` is combined with a signed assertion lacking `SubjectConfirmationData/InResponseTo` 7.1 High -
simplesamlphpDebian SimpleSAMLphp SAML2: Possible DoS via XPath Transform 7.5 High -
simplesamlphpDebian SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass 8.7 High -
simplesamlphpDebian SimpleSAMLphp SAML2 library has incorrect signature verification for HTTP-Redirect binding 8.6 High -
simplesamlphpDebian SimpleSAMLphp SAML2 has an XXE in parsing SAML messages 8.3 High -
simplesamlphpDebian SimpleSAMLphp xml-common XXE vulnerability 8.8 High -
simplesamlphpDebian Cross-site scripting in SimpleSAMLphp 4.4 Medium -
simplesamlphpDebian Log injection in SimpleSAMLphp 4.4 Medium -
simplesamlphpDebian Signature validation bypass in XmlSecLibs 8.8 High -
simplesamlphpDebian SimpleSAMLphp saml2 incorrect signature validation 8.1 High -
simplesamlphpDebian SimpleSAMLphp Improper Verification of Cryptographic Signature 7.5 High -
simplesamlphpDebian SimpleSAMLphp Signature validation bypass 8.1 High -
simplesamlphpDebian SimpleSAMLphp XSS Vulnerability 6.1 Medium -
simplesamlphpDebian SimpleSAMLphp Use of insecure connection charset (sqlauth module) 9.8 Critical -
simplesamlphpDebian SimpleSAMLphp Open redirection protection bypass 6.1 Medium -
simplesamlphpDebian SimpleSAMLphp SAML2 library Regular Expression Denial of Service vulnerability 7.5 High -
simplesamlphpDebian SimpleSAMLphp InfoCard module Incorrect signature verification 7.5 High -
simplesamlphpDebian Incorrect persistent NameID generation in SimpleSAMLphp 9.8 Critical -
simplesamlphpDebian SimpleSAMLphp allows timing side-channel attacks 5.9 Medium -
simplesamlphpDebian SimpleSAMLphp Incorrect IV generation for encryption 5.9 Medium -
simplesamlphpDebian SimpleSAMLphp Unauthenticated encryption in CBC mode 5.9 Medium -
simplesamlphpDebian SimpleSAMLphp Authentication context bypass in the multiauth module 7.5 High -
simplesamlphpDebian SimpleSAMLphp Session fixation issue and authentication bypass in the authcrypt module 9.8 Critical -
simplesamlphpDebian SimpleSAMLphp Invalid token creation and validation 5.9 Medium -
simplesamlphpDebian Incorrect signature verification in SimpleSAMLphp 6.3 Medium -
simplesamlphpDebian SimpleSAMLphp SAML2 spoof SAML responses 9.1 Critical -
simplesamlphpDebian SimpleSAMLphp Information leakage issue in the sanitycheck module 5.3 Medium -
simplesamlphpDebian Cross-site scripting (XSS) vulnerability in logout.php in SimpleSAMLphp 1.8.1 and possibly other... 4.3 Medium -
simplesamlphpDebian Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1... 4.3 Medium -
simplesamlphpDebian simpleSAMLphp incorrectly handles XML encryption 7.5 High