tocsin

Debian/simplesamlphp: unknown

SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is

Action: Upgrade simplesamlphp to 1.19.7-1+deb12u1 or later.

Affected

introducedfixedlast affected
01.19.7-1+deb12u1-

Fixed versions

1.19.7-1+deb12u1

Sources

published · modified · JSON