CVE-2018-6520

SimpleSAMLphp before 1.15.2 allows remote attackers to bypass an open redirect protection mechanism via crafted authority data in a URL.

Date published : 2018-02-01

https://simplesamlphp.org/security/201801-02