Packagist/simplesamlphp/simplesamlphp CVE-2017-12870: medium 5.9, EPSS 0.88%

SimpleSAMLphp Unauthenticated encryption in CBC mode

Action: Upgrade simplesamlphp/simplesamlphp to 1.14.13 or later.

composer require simplesamlphp/simplesamlphp:1.14.13

Affected

Fixed versions

Sources

• osv: GHSA-44pr-mgcp-v36r
• https://nvd.nist.gov/vuln/detail/CVE-2017-12870
• https://github.com/simplesamlphp/simplesamlphp/commit/4c939be1696bacb2b95ee11d4ebc5814a08b04c5
• https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12870.yaml
• https://github.com/simplesamlphp/simplesamlphp
• https://simplesamlphp.org/security/201704-01

CVE-2017-12870 · published 2022-05-17T01:17:12Z · modified 2024-04-25T21:57:34.551678Z · JSON