SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.
| Software | From | Fixed in |
|---|---|---|
simplesamlphp / simplesamlphp
|
1.12.0 | 1.15.1 |