Spoofing Vulnerability in InfoCard Module for SimpleSAMLphp by SimpleSAML

CVE-2017-12874

What is CVE-2017-12874?

The InfoCard module 1.0 for SimpleSAMLphp is susceptible to a spoofing vulnerability due to improper validation of return values in the signature validation utilities. This flaw allows attackers to craft and inject malicious XML messages, potentially leading to unauthorized access or compromised data integrity. It is crucial for users operating this module to apply the recommended security updates to mitigate the risk of exploitation.

References