CVE-2010-10008 json
simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting
published 3y ago modified 4mo ago also GHSA-chgc-rqjr-46gg , EUVD-2023-0445
- cvss
- 3.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.6%
- EPSS 0.6% chance of exploitation in 30 days, percentile 48%
- public exploits
- 0
- none known
Summary
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting. The attack can be launched remotely. Upgrading to version 0.9.0 is able to address this issue. The identifier of the patch is 8365d48c863cf06ccf1465cc0a161cefae29d69d. It is recommended to upgrade the affected component. The identifier VDB-218473 was assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Patch / fix
- packagist simplesamlphp/simplesamlphp-module-openidprovider 0.9.0
- simplesamlphp simplesamlphp-module-openidprovider 0.9.0
Is CVE-2010-10008 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 2y ago
Exploit prediction
0.59% chance of exploitation in the next 30 days, higher than 48% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 3.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N |
| CNA | 3.0 | 3.5 | CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N |
| CNA | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:P/A:N |
| NVD | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| GitHub | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| packagist | simplesamlphp/simplesamlphp-module-openidprovider | <0.9.0 |
0.9.0 |
Affected products
- simplesamlphp simplesamlphp-module-openidprovider
Classification
- Weakness
-
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
-
github.com
/simplesamlphp/simplesamlphp-module-openidprovider/commit/8365d48c863cf06ccf1465cc0a161cefae29d69d
patch, web, third-party-advisory
-
github.com
/simplesamlphp/simplesamlphp-module-openidprovider/releases/tag/v0.9.0
patch, web, third-party-advisory
-
vuldb.com
/?id.218473
vdb-entry, technical-description, web, permissions-required, third-party-advisory
-
vuldb.com
/?ctiid.218473
signature, permissions-required, web, third-party-advisory, vdb-entry
-
nvd.nist.gov
/vuln/detail/CVE-2010-10008
advisory
-
github.com
/simplesamlphp/simplesamlphp-module-openidprovider
package
Sources
- CVE List CVE-2010-10008
- GitHub Advisory GHSA-chgc-rqjr-46gg
- NVD CVE-2010-10008
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.