Lucene search

K
githubGitHub Advisory DatabaseGHSA-FJ28-869X-VV5G
HistoryMay 14, 2022 - 1:05 a.m.

SimpleSAMLphp InfoCard module Incorrect signature verification

2022-05-1401:05:32
CWE-20
GitHub Advisory Database
github.com
3

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%

The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

60.8%