CVE-2017-18122
1 advisory.
Packagist/simplesamlphp/simplesamlphp CVE-2017-18122: high 8.1
SimpleSAMLphp Signature validation bypass
Action: Upgrade simplesamlphp/simplesamlphp to 1.14.17 or later.
composer require simplesamlphp/simplesamlphp:1.14.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.17 | - |
Fixed versions
| 1.14.17 |
Sources
- osv: GHSA-j4qf-3w33-8cgc
- https://nvd.nist.gov/vuln/detail/CVE-2017-18122
- https://github.com/simplesamlphp/simplesamlphp/commit/e2d53086abbb253efb24ddcb49b116246eb0b6ca
- https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-18122.yaml
- https://github.com/simplesamlphp/simplesamlphp
- https://lists.debian.org/debian-lts-announce/2018/02/msg00008.html
- https://simplesamlphp.org/security/201710-01
- https://www.debian.org/security/2018/dsa-4127
CVE-2017-18122 · published · modified · JSON