tocsin

Debian/simplesamlphp: unknown

Cross-site scripting (XSS) vulnerability in modules/core/www/no_cookie.php in SimpleSAMLphp 1.8.1 and possibly other versions before 1.8.2 allows remote attackers to inject arbitrary web script or HTM

Action: Upgrade simplesamlphp to 1.8.2-1 or later.

Affected

introducedfixedlast affected
01.8.2-1-

Fixed versions

1.8.2-1

Sources

published · modified · JSON