CVE-2020-5226

CVE-2020-5226 affects SimpleSAMLphp prior to 1.18.4. The vulnerability stems from www/errorreport.php where error reports are sent via the SimpleSAML\Utils\EMail wrapper. Starting with 1.18.0, Twig-based email templates were introduced; Twig escapes variables, but the older plain PHP template did...

CVE-2020-5225

The CVE-2020-5225 issue affects SimpleSAMLphp up to version 1.18.3, where the www/errorreport.php endpoint did not sanitize the reportID parameter, allowing an attacker to inject newline characters and append arbitrary log lines when the file logging handler is used. This could lead to log inject...

CVE-2017-12871

The CVE-2017-12871 issue affects SimpleSAMLphp (1.14.x–1.14.11) in the aesEncrypt method located at lib/SimpleSAML/Utils/Crypto.php. The root cause is using the first 16 bytes of the secret key as the initialization vector (IV), which enables context-dependent attackers to bypass the encryption p...

CVE-2017-12872

CVE-2017-12872 affects SimpleSAMLphp (

CVE-2017-12870

CVE-2017-12870 affects SimpleSAMLphp 1.14.12 and earlier. The issue arises from the use of AES encrypt/decrypt in the SimpleSAML/Utils/Crypto class to protect session identifiers in replies to non-HTTPS service providers, enabling MITM attackers to obtain sensitive information. The connected sour...

CVE-2017-12867

CVE-2017-12867 affects SimpleSAMLphp 1.14.14 and earlier where an attacker with access to a secret token can extend the token’s validity by manipulating the prepended time offset. The connected advisories confirm this vulnerability in multiple Debian releases and note that patches were released (...

CVE-2016-3124

The CVE concerns SimpleSAMLphp’s sanitycheck module prior to version 1.14.1, which is vulnerable to information leakage. The issue allows remote attackers to determine the PHP version running on the affected system via unspecified vectors. The vulnerability is tied to the sanitycheck component, a...