CVE-2018-6520: SimpleSAMLphp Open redirection protection bypass
Summary
CVE-2018-6520: SimpleSAMLphp Open redirection protection bypass. Affects simplesamlphp/simplesamlphp versions < 1.15.2. Fixed in 1.15.2. How to fix ↓
Also tracked for
- simplesamlphp · Debian:11
The same CVE-2018-6520 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
SimpleSAMLphp is an open-source PHP library that provides support for the SAML (Security Assertion Markup Language) protocol. It is commonly used for implementing Single Sign-On (SSO) authentication in web applications. SimpleSAMLphp allows developers to easily integrate SAML-based authentication into their applications, enabling users to log in using their existing credentials from identity providers. However, a vulnerability has been discovered in SimpleSAMLphp versions prior to 1.15.2 that allows remote attackers to bypass the open redirect protection mechanism.
Vulnerability Detail
The vulnerability in SimpleSAMLphp arises from a flaw in the handling of authority data in URLs. By crafting a malicious URL with specially crafted authority data, an attacker can bypass the open redirect protection mechanism implemented in SimpleSAMLphp. This can lead to unauthorized redirection of users to arbitrary websites, potentially facilitating phishing attacks or other malicious activities. The vulnerability has a CVSS score of 6.1, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.15.2
This is the first release that contains the fix.
composer require simplesamlphp/simplesamlphp:1.15.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update to the fixed version of SimpleSAMLphp to mitigate the risk.
Conclusion
In conclusion, the SimpleSAMLphp library is vulnerable to an open redirection protection bypass issue. This vulnerability can be mitigated by upgrading to version 1.15.2 or later. It is crucial for developers to promptly update their SimpleSAMLphp installations to ensure the security of their applications. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for simplesamlphp/simplesamlphp →
FAQ
SimpleSAMLphp is an open-source PHP library used for implementing SAML-based authentication in web applications.
The vulnerability allows remote attackers to bypass the open redirect protection mechanism, potentially leading to unauthorized redirection of users to malicious websites.
The CVSS score of this vulnerability is 6.1, indicating a moderate severity level.
To fix the vulnerability, it is recommended to upgrade to SimpleSAMLphp version 1.15.2 or later.
There is no known workaround for this vulnerability. It is essential to update to the fixed version of SimpleSAMLphp.
References
Related vulnerabilities
Recent vulnerabilities recorded for simplesamlphp/simplesamlphp.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
