Lucene search

K
osvGoogleOSV:GHSA-2QFC-48V5-4W5H
HistoryMay 14, 2022 - 3:44 a.m.

SimpleSAMLphp Open redirection protection bypass

2022-05-1403:44:35
Google
osv.dev
4
simplesamlphp
open redirection
protection
bypass
version 1.15.2

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.2%

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

52.2%