-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from the fact that validateReference() was called without being passed the canonicalized SignedInfo. Pre-patch, it directly retrieved SignedInfo from $this->signature (original DOM), while the signature verification used $signedInfo->canonicalize(). This created a discrepancy between the data used for hash validation (original) and cryptographic signature verification (canonicalized). The commit fixes this by constructing a new SignedInfo from the canonicalized data before passing it to validateReference, ensuring both validations operate on the same canonicalized content.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| simplesamlphp/xml-security | composer | = 1.6.11 | 1.6.12 |
| simplesamlphp/saml2 | composer | = 5.0.0-alpha.12 | 5.0.0-alpha.13 |
PHPPHPOngoing coverage of React2Shell