CVE-2018-7711: Incorrect signature validation

March 5, 2018 (updated March 29, 2018)

An incorrect check of return values in the signature validation utilities allows an attacker to get invalid signatures accepted as valid by forcing an error during validation.

References

nvd.nist.gov/vuln/detail/CVE-2018-7711
simplesamlphp.org/security/201803-01

Code Behaviors & Features

Detect and mitigate CVE-2018-7711 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →