onelogin/php-saml signature wrapping attacks
Date: 2024-05
Affected: composer/onelogin/php-saml
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2016-1000253

Vulnerability in onelogin/php-saml versions prior to 2.10.0 allows signature Wrapping attacks which may result in a malicious user gaining unauthorized access to a system.


Mitigations:

Architectural layers (MAESTRO):