Packagist/simplesamlphp/saml2 CVE-2018-7711: high 8.1, EPSS 1.19%
SimpleSAMLphp saml2 incorrect signature validation
Action: Upgrade simplesamlphp/saml2 to 1.10.6 or later.
composer require simplesamlphp/saml2:1.10.6composer require simplesamlphp/saml2:2.3.8composer require simplesamlphp/saml2:3.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.6 | - |
| 2.0 | 2.3.8 | - |
| 3.0 | 3.1.4 | - |
Fixed versions
| 1.10.6 | 2.3.8 | 3.1.4 |
Sources
- osv: GHSA-g888-g2pp-82hf
- https://nvd.nist.gov/vuln/detail/CVE-2018-7711
- https://github.com/simplesamlphp/saml2/commit/4f6af7f69f29df8555a18b9bb7b646906b45924d
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/saml2/CVE-2018-7711.yaml
- https://lists.debian.org/debian-lts-announce/2018/03/msg00017.html
- https://simplesamlphp.org/security/201803-01
CVE-2018-7711 · published · modified · JSON