Approved changes feed: RSS · Atom

cpe:2.3:a:php-saml-sp_project:php-saml-sp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhp Saml Sp Project (ed13124d-b028-524c-ae76-b4a9a50cab00)
ProductPhp Saml Sp (de8d4c3d-576b-5358-b0a4-f0438103501f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/fkooman/php-saml-sp purl2cpe 2026-06-01 10:14:48.393687

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26267 vulnerable 2026-06-08 05:57:38.995691 Details available
php-saml-sp before 1.1.1 and 2.x before 2.1.1 allows reading arbitrary files as the webserver user because resolving XML external entities was silently enabled via \LIBXML_DTDLOAD | \LIBXML_DTDATTR.
Published: 2023-02-21T00:00:00.000Z
Updated: 2025-03-14T18:22:26.834Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.