Packagist/simplesamlphp/simplesamlphp: medium 5.3
SimpleSAMLphp exposes credentials in session storage
Action: Upgrade simplesamlphp/simplesamlphp to 1.16.3 or later.
composer require simplesamlphp/simplesamlphp:1.16.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.16.0 | 1.16.3 | - |
Fixed versions
| 1.16.3 |
Sources
- osv: GHSA-7wh8-jrq7-p27f
- https://github.com/simplesamlphp/simplesamlphp/commit/44d1e3052930d93f0f554c25bc7c7602f8136880
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/2018-12-20.yaml
- https://github.com/simplesamlphp/simplesamlphp
- https://simplesamlphp.org/security/201812-01
published · modified · JSON