https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:39:46 +0000 https://cve.radiocsirt.org/vuln/cve-2025-65954 <p><strong>Affected:</strong> simplesamlphp-module-casserver</p> <p>SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redirect to. casserver treats that url as trusted, and either (depending on configuration) redirects the browser there, or shows a &#34;you&#39;ve been logged out&#34; page with a link to continue to that url. Impacted configs include &#39;enable_logout&#39; =&gt; true, and &#39;skip_logout_page&#39; -&gt; true. This issue has been resolved in versions 6.3.1 and 7.0.0.</p> <p><strong>Affected:</strong> simplesamlphp-module-casserver</p> <p>SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redirect to. casserver treats that url as trusted, and either (depending on configuration) redirects the browser there, or shows a &#34;you&#39;ve been logged out&#34; page with a link to continue to that url. Impacted configs include &#39;enable_logout&#39; =&gt; true, and &#39;skip_logout_page&#39; -&gt; true. This issue has been resolved in versions 6.3.1 and 7.0.0.</p> https://cve.radiocsirt.org/vuln/cve-2025-65954