PT-2026-41385 · Unknown · Simplesamlphp-Casserver

Published 2026-05-15 · Updated 2026-05-27 · CVE-2025-65954

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SimpleSAMLphp-casserver versions prior to 6.3.1 SimpleSAMLphp-casserver versions prior to 7.0.0

Description The logout endpoint accepts a url query parameter for redirection. The server treats this URL as trusted and, depending on the configuration, either redirects the browser to that address or displays a logout page containing a link to the specified URL. This occurs when the configuration has 'enable logout' set to true, and is more severe when 'skip logout page' is also set to true.

Recommendations Update to version 6.3.1. Update to version 7.0.0.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-65954

GHSA-CVRM-5HP6-H523

Affected Products

Simplesamlphp-Casserver

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/65xxx/CVE-2025-65954.json · Exploit
• 🔥 https://github.com/simplesamlphp/simplesamlphp-module-casserver/security/advisories/GHSA-cvrm-5hp6-h523 · Exploit
• https://github.com/simplesamlphp/simplesamlphp-module-casserver/commit/fb6c6f1c7b9e757c93c5c306e1d36405e64f6dc5 · Patch
• https://github.com/simplesamlphp/simplesamlphp-module-casserver/commit/0462f50f00b3bb300d83067d11b74146a57bb8e0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-65954 · Security Note
• https://osv.dev/vulnerability/GHSA-cvrm-5hp6-h523 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-65954 · Vendor Advisory
• https://github.com/simplesamlphp/simplesamlphp-module-casserver/blob/21418f7efbea8c4f078fd4a7d1b9eacf94dd4941/src/Controller/LogoutController.php#L104 · Note
• https://github.com/simplesamlphp/simplesamlphp-module-casserver · Note
• https://t.me/cveNotify/164464 · Telegram Post
• https://twitter.com/dailycve/status/2059688582910972359 · Twitter Post
• https://t.me/cveNotify/163924 · Telegram Post
• https://t.me/CVEtracker/54162 · Telegram Post
• https://twitter.com/CVEnew/status/2056670130579591356 · Twitter Post
• https://twitter.com/infoflowcloud/status/2056671626490511852 · Twitter Post