Drupal SAML SSO – Service Provider side channel information disclosure vulnerability

Drupal SAML SSO – Versions 0.0.0 through 3.2.0 contain a side-channel information disclosure vulnerability. This vulnerability stems from an observable time difference that may lead to brute-force attacks...