Open redirect

2018-02-0201:29:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.3%

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

CPENameOperatorVersion
simplesamlphpge1.12.0
simplesamlphplt1.15.1

CPE	Name	Operator	Version
	simplesamlphp	ge	1.12.0
	simplesamlphp	lt	1.15.1

References

simplesamlphp.org/security/201801-02