Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

simplesamlphp: cross-site scripting

Package(s):

simplesamlphp

CVE #(s):

Created:

January 12, 2012

Updated:

January 18, 2012

Description:

From the Debian advisory:

timtai1 discovered that simpleSAMLphp, an authentication and federation platform, is vulnerable to a cross site scripting attack, allowing a remote attacker to access sensitive client data.

Alerts:

Debian

DSA-2387-1

2012-01-11

(Log in to post comments)