CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-02-02

Last modified

2024-08-05

Weaknesses

CWE-601

Affected products

• Simplesamlphp (Simplesamlphp)

References

• https://simplesamlphp.org/security/201801-02