Description (CNA)
SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| simplesamlphp / xml-common | affected < 1.20.0 |
CWE
CWE-611
References
- https://github.com/simplesamlphp/xml-common/security/advisories/GHSA-2x65-fpch-2fcm
- https://github.com/simplesamlphp/xml-common/commit/fa4ade391c3194466acf5fbfd5d2ecdbf5e831f5
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.