CVE-2017-12870
1 advisory.
Packagist/simplesamlphp/simplesamlphp CVE-2017-12870: medium 5.9
SimpleSAMLphp Unauthenticated encryption in CBC mode
Action: Upgrade simplesamlphp/simplesamlphp to 1.14.13 or later.
composer require simplesamlphp/simplesamlphp:1.14.13Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.13 | - |
Fixed versions
| 1.14.13 |
Sources
- osv: GHSA-44pr-mgcp-v36r
- https://nvd.nist.gov/vuln/detail/CVE-2017-12870
- https://github.com/simplesamlphp/simplesamlphp/commit/4c939be1696bacb2b95ee11d4ebc5814a08b04c5
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12870.yaml
- https://github.com/simplesamlphp/simplesamlphp
- https://simplesamlphp.org/security/201704-01
CVE-2017-12870 · published · modified · JSON