PT-2024-40468 · Unknown · Simplesamlphp

Published 2024-05-28 · Updated 2024-05-28

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp versions prior to 1.14.4

Description The issue allows attackers to display links targeting a malicious website inside a trusted site running SimpleSAMLphp, due to the lack of security checks involving the link href and retryURL HTTP parameters. This could enable a remote attacker to craft a link pointing to a trusted website, including a parameter pointing to a malicious website, and try to fool the victim into visiting that website by clicking on a link in the page presented by SimpleSAMLphp.

Recommendations For versions prior to 1.14.4, update to version 1.14.4 or later to resolve the issue. As a temporary workaround, consider configuring the trusted.url.domains option to specify a white list of trusted websites, and restrict the use of the link href and retryURL parameters to minimize the risk of exploitation.

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

GHSA-V858-922F-FJ9V

Affected Products

Simplesamlphp

References · 6

• https://osv.dev/vulnerability/GHSA-v858-922f-fj9v · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/simplesamlphp/simplesamlphp/201606-01.yaml · Note
• https://github.com/simplesamlphp/simplesamlphp · Note
• https://github.com/simplesamlphp/simplesamlphp/commit/b1af4e47c81bca2bee633b3f84f4fde624f359ba · Note
• https://github.com/simplesamlphp/simplesamlphp/commit/d26eb8f17dc9916a5ef2fd0a286b0fc96a561e71 · Note
• https://simplesamlphp.org/security/201606-01 · Note