Packagist/lightsaml/lightsaml CVE-2018-1000165: high 7.5, EPSS 1.22%

LightSAML Incorrect Access Control vulnerability

Action: Upgrade lightsaml/lightsaml to 1.3.5 or later.

composer require lightsaml/lightsaml:1.3.5

Affected

Fixed versions

Sources

• osv: GHSA-vg4f-8v9q-5c3x
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000165
• https://github.com/lightSAML/lightSAML/commit/47cef07bb09779df15620799f3763d1b8d32307a
• https://github.com/lightSAML/lightSAML
• https://github.com/lightSAML/lightSAML/releases/tag/1.3.5

CVE-2018-1000165 · published 2022-05-13T01:48:33Z · modified 2024-04-23T17:43:53.138176Z · JSON