CVE-2025-65954

🗓️ 18 May 2026 19:57:07Reported by GitHub_MType

Open redirect in caserver logout endpoint; redirects to trusted links. Fixed in six three one and seven zero zero.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-65954	18 May 202619:57	–	attackerkb
Circl	CVE-2025-65954	14 May 202622:42	–	circl
CNNVD	SimpleSAMLphp-casserver 输入验证错误漏洞	18 May 202600:00	–	cnnvd
Cvelist	CVE-2025-65954 SimpleSAMLphp-casserver has an Open Redirect vulnerability via logout	18 May 202619:57	–	cvelist
EUVD	EUVD-2025-209889	18 May 202619:57	–	euvd
Github Security Blog	SimpleSAMLphp casserver: Open Redirect in logout	15 May 202616:21	–	github
NVD	CVE-2025-65954	18 May 202620:16	–	nvd
OSV	GHSA-CVRM-5HP6-H523 SimpleSAMLphp casserver: Open Redirect in logout	15 May 202616:21	–	osv
Positive Technologies	PT-2026-41385	15 May 202600:00	–	ptsecurity
Snyk	Open Redirect	15 May 202616:21	–	snyk

NVD

Vulners

Node

simplesamlphp simplesamlphp-module-casserverRange<6.3.1

simplesamlphp simplesamlphp-module-casserverMatch7.0.0rc1

simplesamlphp simplesamlphp-module-casserverMatch7.0.0rc2

[
  {
    "vendor": "simplesamlphp",
    "product": "simplesamlphp-module-casserver",
    "versions": [
      {
        "version": "< 6.3.1",
        "status": "affected"
      },
      {
        "version": ">= 7.0.0-rc1,  < 7.0.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/simplesamlphp/simplesamlphp-module-casserver/commit/0462f50f00b3bb300d83067d11b74146a57bb8e0
github	www.github.com/simplesamlphp/simplesamlphp-module-casserver/security/advisories/GHSA-cvrm-5hp6-h523
github	www.github.com/simplesamlphp/simplesamlphp-module-casserver/commit/fb6c6f1c7b9e757c93c5c306e1d36405e64f6dc5

27 May 2026 14:25Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.1

CVSS 34.7

EPSS0.00009

SSVC

CWE-601