https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:43:50 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-06611 cnvd-2018-06611 https://cve.radiocsirt.org/vuln/cnvd-2018-06611 https://cve.radiocsirt.org/vuln/euvd-2026-63344 EUVD-2026-63344 https://cve.radiocsirt.org/vuln/euvd-2026-63344 https://cve.radiocsirt.org/vuln/fkie_cve-2018-7644 <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-7644 https://cve.radiocsirt.org/vuln/ghsa-923w-2xv2-7pr8 <p><strong>Affected:</strong> Packagist: simplesamlphp/saml2</p> <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> <p><strong>Affected:</strong> Packagist: simplesamlphp/saml2</p> <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> https://cve.radiocsirt.org/vuln/ghsa-923w-2xv2-7pr8 https://cve.radiocsirt.org/vuln/gsd-2018-7644 gsd-2018-7644 https://cve.radiocsirt.org/vuln/gsd-2018-7644 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7644 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: simplesamlphp</p> <p>The XmlSecLibs library as used in the saml2 library in SimpleSAMLphp before 1.15.3 incorrectly verifies signatures on SAML assertions, allowing a remote attacker to construct a crafted SAML assertion on behalf of an Identity Provider that would pass as cryptographically valid, thereby allowing them to impersonate a user from that Identity Provider, aka a key confusion issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-7644