PT-2020-18390

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.18.6 Description The module controller in SimpleSAMLModule has code to identify paths ending with .php and process those as PHP code. However, the check does not account for uppercase letters. If someone...