1 matches found
SimpleSAMLphp has Possible DoS via XPath Transform
Summary This library turned out to be vulnerable to Denial-of-Service attacks using XPath transforms. A mitigation has been put in place to restrict the number of transforms and to restrict transforms to only the transform-algorithms mentioned in the SAML 2.0 Core Specifications and specifically...
7.5CVSS5.7AI score
SaveExploits0References2Affected Software2
20