Lucene search
Veracode Vulnerability DatabaseVERACODE:22378HistoryJan 28, 2020 - 5:04 a.m.
CRLF Injection
2020-01-2805:04:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.001 Low
EPSS
Percentile
22.7%
simplesamlphp/simplesamlphp is vulnerable to CRLF injection. The vulnerability exists as the file logging handler is configured to be used with simplesamlphp, allowing the unsanitized values of reportID to be used to inject newline characters into logs.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp/simplesamlphp | le | 1.18.3 |
Related
prion
prion
Design/Logic Flaw
2020-01-24 21:15:00
nvd
nvd
CVE-2020-5225
2020-01-24 21:15:14
ubuntucve
ubuntucve
CVE-2020-5225
2020-01-24 00:00:00
osv
osv
CVE-2020-5225
2020-01-24 21:15:14
Log injection in SimpleSAMLphp
2020-01-24 21:26:13
github
github
Log injection in SimpleSAMLphp
2020-01-24 21:26:13
debiancve
debiancve
CVE-2020-5225
2020-01-24 21:15:14
cve
cve
CVE-2020-5225
2020-01-24 21:15:14
cvelist
cvelist
CVE-2020-5225 Log injection in SimpleSAMLphp
2020-01-24 20:55:14