saml-toolkits/php-saml · Security
onelogin/php-saml signature wrapping attacks
- GHSA ID
- GHSA-g48f-pgwh-wwxx
- CVE ID
- CVE-2016-1000253
- Severity
- medium
- Published
- Updated
Description
Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.