The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| simplesamlphp/simplesamlphp-module-infocard(Packagist) | 0 | 1.0.1 | N/A |
CVSS Metrics
