Open Redirect Vulnerability in SimpleSAMLphp: CVE-2018-6520
Summary
CVE-2018-6520: SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL. Affects simplesamlphp across 2 version ranges.
< 1.15.2-1
>= b5ff6f0d44be3ef7ac29087368e6570fbfefbb36, < 14b876ba453059d9c216703f6834dc6c749d4586
Fixed in 1.15.2-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SimpleSAMLphp is an open-source application written in PHP that facilitates Single Sign-On (SSO) and identity management. It is widely used for integrating various authentication methods and protocols, making it a crucial component for secure web applications. The vulnerability CVE-2018-6520 affects versions prior to 1.15.2, allowing attackers to exploit an open redirect mechanism, potentially leading to phishing attacks or unauthorized access.
Vulnerability Detail
CVE-2018-6520 is a security flaw in SimpleSAMLphp that allows remote attackers to bypass the open redirect protection mechanism. This vulnerability arises from improper validation of authority data in URLs, enabling attackers to craft malicious links that redirect users to untrusted sites. The ramifications include the potential for phishing attacks, where users may unknowingly provide sensitive information to malicious actors. The vulnerability has a CVSS score of 6.1, indicating a moderate level of risk.
How To Fix
Minimum fixed version
1.15.2-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade simplesamlphpTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate upgrading is not feasible, consider implementing input validation on URLs to ensure they do not redirect to untrusted domains. This can be done by sanitizing user inputs and checking against a whitelist of allowed domains before processing any redirects.
Conclusion
CVE-2018-6520 is a significant vulnerability in SimpleSAMLphp that poses risks of open redirect attacks. Users are strongly advised to upgrade to the latest version to protect against potential exploitation. Implementing input validation can serve as a temporary measure until the upgrade is completed.
See every vulnerability recorded for simplesamlphp →
FAQ
CVE-2018-6520 is a vulnerability in SimpleSAMLphp that allows attackers to bypass open redirect protections, potentially leading to phishing attacks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The main consequence is the risk of phishing attacks, where users may be redirected to malicious sites that can steal their credentials.
Users should upgrade to SimpleSAMLphp version 1.15.2 or later to mitigate the risk associated with this vulnerability.
Yes, you can implement input validation on URLs to prevent redirects to untrusted domains as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for simplesamlphp.
