TI-2023-26752 CVE-2023-49087 · GHSA-ww7x-3gxh-qm6r
Validation of SignedInfo
Priority LOW 32
xml-security is a library that implements XML signatures and encryption.
Vulnerabilities
4 records
TI-2018-05557 CVE-2018-7711 · GHSA-g888-g2pp-82hf
HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect…
Priority LOW 38
HTTPRedirect.php in the saml2 library in SimpleSAMLphp before 1.15.4 has an incorrect check of return values in the signature validation utilities, allowing an attacker to get invalid signatures accepted as valid by forc…
TI-2018-04799 CVE-2018-6519 · GHSA-hhm8-2j4g-mpgg
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp…
Priority LOW 36
The SAML2 library before 1.10.4, 2.x before 2.3.5, and 3.x before 3.1.1 in SimpleSAMLphp has a Regular Expression Denial of Service vulnerability for fraction-of-seconds data in a timestamp.
TI-2016-07944 CVE-2016-9814 · GHSA-r8v4-7vwj-983x
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and…
Priority MEDIUM 44
The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML respons…