Php-saml-sp Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Php-saml-sp Project records in CISA KEV

No Php-saml-sp Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php-saml-sp 1 record LOW

Records

1 record in Php-saml-sp · all components

TI-2023-11429 CVE-2023-26267 · GHSA-pc48-9j3j-4v3w

php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the…

LOW 29

php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML external entities was silently enabled via \LIBXML_DTDLOAD | \LIBXML_DTDATTR.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0052 Published 2023-02-21 No fix listed CWE-611

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0