simplesamlphp-module-casserver vulnerabilities
1 known vulnerability in simplesamlphp-module-casserver from Simplesamlphp. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
simplesamlphp-module-casserver: Improper Limitation of a Pathname to a Restricted Directory
SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. Prior to version 7.0.3, simplesamlphp-module-casserver builds file paths for the file-based CAS ticket store by directly concatenating the configured ticke