CVE-2018-6520

—

CVSS 3.0

6.1 medium

EPSS

<1%p56

Published

Feb 2, 2018 (Feb 2, 2018)

Modified

Jun 17, 2026

Description

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

Vendors: simplesamlphp
Products: simplesamlphp
Weakness: CWE-601
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.