CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL

published February 2, 2018

CVSS
—
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00851 · 57.6th percentile
Published
2018-02-02T01:00Z
EPSS history
Timeline
  • 02 FEB 01:00Z
    SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL
    cvelistv5