{"items":[{"id":"NVI-00004426","kind":"vulnerability","title":"Cross-site scripting in SimpleSAMLphp","revision":5,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-mj9p-v2r8-wf8w","CVE-2020-5226"],"plain_summary":"OSV carries this publisher advisory for simplesamlphp/simplesamlphp. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.18.4 for simplesamlphp/simplesamlphp. Confirm the publisher’s latest guidance.","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null},{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-0f4e22816ac6dee6900c545aec65ff47"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"3.5 LOW (2.0)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"4.4 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"5.4 MEDIUM (3.1)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"EPSS","as_of":"2026-11-03T12:00:27.000Z","value":"0.544%","meaning":"FIRST EPSS model v2026.06.15; exploitation probability over 30 days, percentile 0.457. Missing scores are unknown.","source_id":"sr-0f4e22816ac6dee6900c545aec65ff47"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-65c16fd1f3e25a4e542c132611e678d0","url":"https://github.com/advisories/GHSA-mj9p-v2r8-wf8w","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-mj9p-v2r8-wf8w","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:30.980Z"},{"id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5226","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2020-5226","publisher":"NIST National Vulnerability Database","observed_at":"2026-10-31T22:07:21.349Z"},{"id":"sr-0f4e22816ac6dee6900c545aec65ff47","url":"https://www.first.org/epss/data.html","basis":"official_catalog","notes":"FIRST EPSS; probability of exploitation in the next 30 days, not local compromise. Dataset date/model retained; FIRST services terms apply.","title":"CVE-2020-5226","publisher":"FIRST EPSS","observed_at":"2026-11-03T17:42:56.080Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"technology":"simplesamlphp/simplesamlphp","known_exclusions":[],"conditions_summary":"### Background\n\nSimpleSAMLphp allows users to report errors and failures to the system administrators via a web form. This web form gathers some contextual information automatically, but it also allows the user to provide their email address for follow-ups and a free-text explanation of what happened. Once submitted, the report is sent as an email to the administrative email address configured in the software.\n\n### Description\n\nThe `www/erroreport.php` script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp  1.18.0, a new `SimpleSAML\\Utils\\EMail` class was introduced to handle sending emails, implemented as a wrapper of an external dependency.\n\nThis new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in `www/errorreport.php` was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by man","public_affected_ranges":["ECOSYSTEM: introduced 1.18.0; fixed 1.18.4"]}],"null_published_at":"2026-11-06T00:29:57.276Z","source_updated_at":"2026-09-10T03:48:41.952Z","source_disclosed_at":"2020-01-24T21:26:54.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Dated EPSS estimate updated; this is not a new disclosure or proof of exploitation.","null_first_observed_at":"2026-10-31T21:42:30.980Z"},{"id":"NVI-00004426","kind":"vulnerability","title":"Cross-site scripting in SimpleSAMLphp","revision":4,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-mj9p-v2r8-wf8w","CVE-2020-5226"],"plain_summary":"OSV carries this publisher advisory for simplesamlphp/simplesamlphp. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.18.4 for simplesamlphp/simplesamlphp. Confirm the publisher’s latest guidance.","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null},{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-22c2e0032174bb14965df70962f8c7f5"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"3.5 LOW (2.0)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"4.4 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"5.4 MEDIUM (3.1)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"EPSS","as_of":"2026-11-01T12:00:16.000Z","value":"0.544%","meaning":"FIRST EPSS model v2026.06.15; exploitation probability over 30 days, percentile 0.45661. Missing scores are unknown.","source_id":"sr-22c2e0032174bb14965df70962f8c7f5"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-65c16fd1f3e25a4e542c132611e678d0","url":"https://github.com/advisories/GHSA-mj9p-v2r8-wf8w","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-mj9p-v2r8-wf8w","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:30.980Z"},{"id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5226","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2020-5226","publisher":"NIST National Vulnerability Database","observed_at":"2026-10-31T22:07:21.349Z"},{"id":"sr-22c2e0032174bb14965df70962f8c7f5","url":"https://www.first.org/epss/data.html","basis":"official_catalog","notes":"FIRST EPSS; probability of exploitation in the next 30 days, not local compromise. Dataset date/model retained; FIRST services terms apply.","title":"CVE-2020-5226","publisher":"FIRST EPSS","observed_at":"2026-11-01T14:27:48.610Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"technology":"simplesamlphp/simplesamlphp","known_exclusions":[],"conditions_summary":"### Background\n\nSimpleSAMLphp allows users to report errors and failures to the system administrators via a web form. This web form gathers some contextual information automatically, but it also allows the user to provide their email address for follow-ups and a free-text explanation of what happened. Once submitted, the report is sent as an email to the administrative email address configured in the software.\n\n### Description\n\nThe `www/erroreport.php` script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp  1.18.0, a new `SimpleSAML\\Utils\\EMail` class was introduced to handle sending emails, implemented as a wrapper of an external dependency.\n\nThis new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in `www/errorreport.php` was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by man","public_affected_ranges":["ECOSYSTEM: introduced 1.18.0; fixed 1.18.4"]}],"null_published_at":"2026-11-04T18:04:03.177Z","source_updated_at":"2026-09-10T03:48:41.952Z","source_disclosed_at":"2020-01-24T21:26:54.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Dated EPSS estimate updated; this is not a new disclosure or proof of exploitation.","null_first_observed_at":"2026-10-31T21:42:30.980Z"},{"id":"NVI-00004426","kind":"vulnerability","title":"Cross-site scripting in SimpleSAMLphp","revision":3,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-mj9p-v2r8-wf8w","CVE-2020-5226"],"plain_summary":"OSV carries this publisher advisory for simplesamlphp/simplesamlphp. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.18.4 for simplesamlphp/simplesamlphp. Confirm the publisher’s latest guidance.","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null},{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-41095367c0f1ab480ecfb6116a0e3513"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"3.5 LOW (2.0)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"4.4 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"5.4 MEDIUM (3.1)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"EPSS","as_of":"2026-10-31T12:00:27.000Z","value":"0.544%","meaning":"FIRST EPSS model v2026.06.15; exploitation probability over 30 days, percentile 0.45666. Missing scores are unknown.","source_id":"sr-41095367c0f1ab480ecfb6116a0e3513"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-65c16fd1f3e25a4e542c132611e678d0","url":"https://github.com/advisories/GHSA-mj9p-v2r8-wf8w","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-mj9p-v2r8-wf8w","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:30.980Z"},{"id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5226","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2020-5226","publisher":"NIST National Vulnerability Database","observed_at":"2026-10-31T22:07:21.349Z"},{"id":"sr-41095367c0f1ab480ecfb6116a0e3513","url":"https://www.first.org/epss/data.html","basis":"official_catalog","notes":"FIRST EPSS; probability of exploitation in the next 30 days, not local compromise. Dataset date/model retained; FIRST services terms apply.","title":"CVE-2020-5226","publisher":"FIRST EPSS","observed_at":"2026-10-31T22:06:03.704Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"technology":"simplesamlphp/simplesamlphp","known_exclusions":[],"conditions_summary":"### Background\n\nSimpleSAMLphp allows users to report errors and failures to the system administrators via a web form. This web form gathers some contextual information automatically, but it also allows the user to provide their email address for follow-ups and a free-text explanation of what happened. Once submitted, the report is sent as an email to the administrative email address configured in the software.\n\n### Description\n\nThe `www/erroreport.php` script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp  1.18.0, a new `SimpleSAML\\Utils\\EMail` class was introduced to handle sending emails, implemented as a wrapper of an external dependency.\n\nThis new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in `www/errorreport.php` was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by man","public_affected_ranges":["ECOSYSTEM: introduced 1.18.0; fixed 1.18.4"]}],"null_published_at":"2026-10-31T23:18:17.209Z","source_updated_at":"2026-09-10T03:48:41.952Z","source_disclosed_at":"2020-01-24T21:26:54.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Dated EPSS estimate updated; this is not a new disclosure or proof of exploitation.","null_first_observed_at":"2026-10-31T21:42:30.980Z"},{"id":"NVI-00004426","kind":"vulnerability","title":"Cross-site scripting in SimpleSAMLphp","revision":2,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected.","NVD lastModified does not establish freshness of every associated CPE record."],"lifecycle":"active","identifiers":["GHSA-mj9p-v2r8-wf8w","CVE-2020-5226"],"plain_summary":"OSV carries this publisher advisory for simplesamlphp/simplesamlphp. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.18.4 for simplesamlphp/simplesamlphp. Confirm the publisher’s latest guidance.","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null},{"summary":"Identify the exact component and deployed version, examine the linked publisher’s conditions, and retain evidence of any mitigation.","source_ids":["sr-6a3eaa9e16b5743d0347dd90d2db74cb"],"action_type":"investigate","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"3.5 LOW (2.0)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"4.4 MEDIUM (3.1)","meaning":"security-advisories@github.com severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"},{"kind":"CVSS","as_of":"2026-06-17T03:21:03.803Z","value":"5.4 MEDIUM (3.1)","meaning":"nvd@nist.gov severity; no combined Null risk score.","source_id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb"}],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-65c16fd1f3e25a4e542c132611e678d0","url":"https://github.com/advisories/GHSA-mj9p-v2r8-wf8w","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-mj9p-v2r8-wf8w","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:30.980Z"},{"id":"sr-6a3eaa9e16b5743d0347dd90d2db74cb","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-5226","basis":"official_catalog","notes":"This product uses data from the NVD API but is not endorsed or certified by the NVD.","title":"CVE-2020-5226","publisher":"NIST National Vulnerability Database","observed_at":"2026-10-31T22:07:21.349Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"technology":"simplesamlphp/simplesamlphp","known_exclusions":[],"conditions_summary":"### Background\n\nSimpleSAMLphp allows users to report errors and failures to the system administrators via a web form. This web form gathers some contextual information automatically, but it also allows the user to provide their email address for follow-ups and a free-text explanation of what happened. Once submitted, the report is sent as an email to the administrative email address configured in the software.\n\n### Description\n\nThe `www/erroreport.php` script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp  1.18.0, a new `SimpleSAML\\Utils\\EMail` class was introduced to handle sending emails, implemented as a wrapper of an external dependency.\n\nThis new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in `www/errorreport.php` was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by man","public_affected_ranges":["ECOSYSTEM: introduced 1.18.0; fixed 1.18.4"]}],"null_published_at":"2026-10-31T22:27:06.712Z","source_updated_at":"2026-09-10T03:48:41.952Z","source_disclosed_at":"2020-01-24T21:26:54.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"Source facts changed; compare the preserved prior revision.","null_first_observed_at":"2026-10-31T21:42:30.980Z"},{"id":"NVI-00004426","kind":"vulnerability","title":"Cross-site scripting in SimpleSAMLphp","revision":1,"unknowns":["Customer inventory, deployment, reachability and exploitation have not been inspected."],"lifecycle":"active","identifiers":["GHSA-mj9p-v2r8-wf8w","CVE-2020-5226"],"plain_summary":"OSV carries this publisher advisory for simplesamlphp/simplesamlphp. This is an aggregated source copy; consult the original publisher and compare update dates.","review_status":"source_listed","control_topics":[],"public_actions":[{"summary":"The original advisory lists fixed boundaries 1.18.4 for simplesamlphp/simplesamlphp. Confirm the publisher’s latest guidance.","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"action_type":"vendor_patch","limitations":"Confirm current vendor support, compatibility and deployment evidence. This report has not tested a fix in your system.","current_supported_target":null}],"schema_version":"1.1.0","source_metrics":[],"why_it_matters":"Published affected context helps an owner decide what evidence to gather. This report has not examined your application.","related_sources":[{"id":"sr-65c16fd1f3e25a4e542c132611e678d0","url":"https://github.com/advisories/GHSA-mj9p-v2r8-wf8w","basis":"vendor_advisory","notes":"GitHub-origin advisory, CC-BY-4.0; OSV is an aggregate copy, not independent corroboration.","title":"GHSA-mj9p-v2r8-wf8w","publisher":"GitHub Advisory Database via OSV","observed_at":"2026-10-31T21:42:30.980Z"}],"affected_context":[{"certainty":"source_listed","source_ids":["sr-65c16fd1f3e25a4e542c132611e678d0"],"technology":"simplesamlphp/simplesamlphp","known_exclusions":[],"conditions_summary":"### Background\n\nSimpleSAMLphp allows users to report errors and failures to the system administrators via a web form. This web form gathers some contextual information automatically, but it also allows the user to provide their email address for follow-ups and a free-text explanation of what happened. Once submitted, the report is sent as an email to the administrative email address configured in the software.\n\n### Description\n\nThe `www/erroreport.php` script allows error reports to be submitted and sent to the system administrator. Starting with SimpleSAMLphp  1.18.0, a new `SimpleSAML\\Utils\\EMail` class was introduced to handle sending emails, implemented as a wrapper of an external dependency.\n\nThis new wrapper allows us to use Twig templates in order to create the email sent with an error report. Since Twig provides automatic escaping of variables, manual escaping of the free-text field in `www/errorreport.php` was removed to avoid double escaping. However, for those not using the new user interface yet, an email template is hardcoded into the class itself in plain PHP. Since no escaping is provided in this template, it is then possible to inject HTML inside the template by man","public_affected_ranges":["ECOSYSTEM: introduced 1.18.0; fixed 1.18.4"]}],"null_published_at":"2026-10-31T22:12:57.124Z","source_updated_at":"2026-09-10T03:48:41.952Z","source_disclosed_at":"2020-01-24T21:26:54.000Z","is_synthetic_fixture":false,"null_last_reviewed_at":null,"public_change_summary":"First indexed by Null; source disclosure date is shown separately.","null_first_observed_at":"2026-10-31T21:42:30.980Z"}],"next_cursor":null,"snapshot_revision":"42594"}