onelogin/php-saml signature wrapping attacks

2024-05-1723:06:55

Google

osv.dev

onelogin

php-saml

signature wrapping attacks

vulnerability

unauthorized access

software

6.7 Medium

AI Score

Confidence

Low

JSON

Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.

CPENameOperatorVersion
onelogin/php-samleq2.7.0
onelogin/php-samleq2.4.0
onelogin/php-samleq2.5.0
onelogin/php-samleq2.6.1
onelogin/php-samleq2.9.1
onelogin/php-samleq2.3.0
onelogin/php-samleq2.6.0
onelogin/php-samleq2.1.0
onelogin/php-samleq2.9.0
onelogin/php-samleq2.0.0

Name	Operator	Version
onelogin/php-saml	eq	2.7.0
onelogin/php-saml	eq	2.4.0
onelogin/php-saml	eq	2.5.0
onelogin/php-saml	eq	2.6.1
onelogin/php-saml	eq	2.9.1
onelogin/php-saml	eq	2.3.0
onelogin/php-saml	eq	2.6.0
onelogin/php-saml	eq	2.1.0
onelogin/php-saml	eq	2.9.0
onelogin/php-saml	eq	2.0.0