Executive brief
SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
Affected products
- Packagist simplesamlphp/saml2-legacy
- Packagist simplesamlphp/saml2
Junglewise Threat Intelligence
CVE-2024-52806: SimpleSAMLphp SAML2 has an XXE in parsing SAML messages
CVE-2024-52806 · Severity: low · CVSS 3.1 · Published 2024-12-02
Technologies: simplesamlphp/saml2 (Packagist). Vendors: Packagist.