Lucene search
Veracode Vulnerability DatabaseVERACODE:25057HistoryApr 22, 2020 - 8:49 a.m.
Information Disclosure
2020-04-2208:49:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
19.4%
simplesamlphp is vulnerable to information disclosure. It does not properly handle a request with an uppercase file extension (‘.PHP’), causing the server to disclose the contents of the file by sending to the browser instead of executing it and therefore leaking the sensitive source code in third-party modules.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp/simplesamlphp | le | 1.18.5 |
Related
osv
osv
CVE-2020-5301
2020-04-21 20:15:13
Information disclosure of source code in SimpleSAMLphp
2020-04-22 20:59:44
friendsofphp
friendsofphp
Information disclosure of source code
2018-04-17 07:15:00
prion
prion
Information disclosure
2020-04-21 20:15:00
cvelist
cvelist
CVE-2020-5301 Information disclosure of source code in SimpleSAMLphp
2020-04-21 19:50:13
github
github
Information disclosure of source code in SimpleSAMLphp
2020-04-22 20:59:44
debiancve
debiancve
CVE-2020-5301
2020-04-21 20:15:13
cve
cve
CVE-2020-5301
2020-04-21 20:15:13
ubuntucve
ubuntucve
CVE-2020-5301
2020-04-21 00:00:00
nvd
nvd
CVE-2020-5301
2020-04-21 20:15:13