CVE-2024-52596

SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0.

Affected products

Simplesamlphp

Fix

Available

CVSS 4.0

8.8 HIGH

EPSS

1.0% (59th percentile)

Weakness

CWE-611

NVD status

Deferred

Published

2024-12-02