Simplesamlphp: >> Simplesamlphp >> 1.14.14 Security Vulnerabilities
The sqlauth module in SimpleSAMLphp before 1.15.2 relies on the MySQL utf8 charset, which truncates queries upon encountering four-byte characters. There might be a scenario in which this allows remote attackers to bypass intended access restrictions.
CVSS Score
9.8
EPSS Score
0.031
Published
2018-02-02
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
CVSS Score
5.9
EPSS Score
0.013
Published
2017-08-29
Page 2