CVE-2024-52596: SimpleSAMLphp xml-common XXE vulnerability

December 2, 2024

When loading an (untrusted) XML document, for example the SAMLResponse, it’s possible to induce an XXE.

References

github.com/advisories/GHSA-2x65-fpch-2fcm
github.com/simplesamlphp/xml-common
github.com/simplesamlphp/xml-common/commit/fa4ade391c3194466acf5fbfd5d2ecdbf5e831f5
github.com/simplesamlphp/xml-common/security/advisories/GHSA-2x65-fpch-2fcm
nvd.nist.gov/vuln/detail/CVE-2024-52596

Code Behaviors & Features

Detect and mitigate CVE-2024-52596 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →