simplesamlphp/simplesamlphp-module-infocard vulnerabilities

Latest simplesamlphp/simplesamlphp-module-infocard CVEs

Newest publication first

1. CVE-2010-10004 Information Cards Module cross site scripting

   Published 2023-01-09

   Medium·CVSS 6.1 EPSS 0.56%

   A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this...

2. CVE-2017-12874 SimpleSAMLphp InfoCard module Incorrect signature verification

   Published 2017-09-01

   High·CVSS 7.5 EPSS 1.3% PoC

   The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.