medium6.1
CVE-2018-6520
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
Impact
SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simplesamlphp | Simplesamlphp | from 1.12.0 before 1.15.1 |