{"action":"Upgrade simplesamlphp/simplesamlphp to 1.14.11 or later.","affected":[{"fixed":"1.14.11","introduced":"1.7.0"}],"component":"simplesamlphp/simplesamlphp","cve_ids":["CVE-2017-12873"],"ecosystem":"Packagist","epss":0.01656,"exploited":false,"fixed_versions":["1.14.11"],"ghsa_id":"GHSA-gp2m-7cfp-h6gf","id":"tcs_01M5KF2Y2QABT0BQ8GCZTA3543","modified_at":"2024-02-16T08:22:55.170517Z","published_at":"2020-01-24T21:28:06Z","references":["https://osv.dev/vulnerability/GHSA-gp2m-7cfp-h6gf","https://github.com/simplesamlphp/simplesamlphp/security/advisories/GHSA-gp2m-7cfp-h6gf","https://nvd.nist.gov/vuln/detail/CVE-2017-12873","https://github.com/simplesamlphp/simplesamlphp/commit/90dca835158495b173808273e7df127303b8b953","https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/CVE-2017-12873.yaml","https://lists.debian.org/debian-lts-announce/2017/12/msg00007.html","https://simplesamlphp.org/security/201612-04","https://www.debian.org/security/2018/dsa-4127"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-gp2m-7cfp-h6gf","url":"https://osv.dev/vulnerability/GHSA-gp2m-7cfp-h6gf"}],"summary":"Incorrect persistent NameID generation in SimpleSAMLphp"}