PT-2020-18321

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions up to 1.18.3 Description The issue concerns log injection in SimpleSAMLphp. The www/errorreport.php script did not properly sanitize the reportID parameter obtained from the request, allowing an attacker to inject new lo...