CVEvulnerability

CVE-2025-65954

6.1 MEDIUM Published 2026-05-18 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2026-05-18
Last modified
2026-10-07
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
Weaknesses
CWE-601

Description

SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS server in the form of a SimpleSAMLphp module. In versions below 6.3.1 and 7.0.0, the logout endpoint accepts a url query parameter to redirect to. casserver treats that url as trusted, and either (depending on configuration) redirects the browser there, or shows a "you've been logged out" page with a link to continue to that url. Impacted configs include 'enable_logout' => true, and 'skip_logout_page' -> true. This issue has been resolved in versions 6.3.1 and 7.0.0.

Affected configurations

• simplesamlphp simplesamlphp-module-casserver (< 6.3.1) • simplesamlphp simplesamlphp-module-casserver 7.0.0

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References