| Package | Affected versions | Patched versions |
|---|---|---|
| simplesamlphp/simplesamlphp | ≥ 1.14.0, < 1.14.15 | 1.14.15 |
| simplesamlphp | ≤ 1.14.14 |
The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the prepended time offset.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free