← Back

Lightsaml

lightsaml

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Lightsaml
lightsaml
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-1000165
1Lightsaml
1Lightsaml
Nov 21, 2024
Apr 18, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. T...Show more
LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and later.Show less