PT-2024-10568 · Onelogin · Onelogin/Php-Saml

Published 2024-05-17 · Updated 2024-05-17 · CVE-2016-1000253

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions onelogin/php-saml versions prior to 2.10.0

Description The issue allows for signature wrapping attacks, potentially resulting in unauthorized system access by a malicious user.

Recommendations For versions prior to 2.10.0, update to version 2.10.0 or later to resolve the issue.

Exploit

Related Identifiers

CVE-2016-1000253

GHSA-G48F-PGWH-WWXX

Affected Products

Onelogin/Php-Saml

References · 4

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/onelogin/php-saml/CVE-2016-1000253.yaml · Exploit
• https://osv.dev/vulnerability/GHSA-g48f-pgwh-wwxx · Vendor Advisory
• https://github.com/SAML-Toolkits/php-saml · Note
• https://github.com/onelogin/php-saml/commit/9d31baa97a57b0989020f62d24307c29e325dac3 · Note