CVE-2018-6520
NONE EPSS 53.9%
Published Feb 2, 20188y ago · Modified Jun 17, 20262w ago
Published Feb 2, 2018 8y ago
Last Modified Jun 17, 2026 2w ago
Description
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
Threat Intelligence
EPSS Exploit Probability
53.9% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-601
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| simplesamlphp | simplesamlphp | * | ≥1.12.0 – <1.15.1 |
References 1
- simplesamlphp.org https://simplesamlphp.org/security/201801-02
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.