CVE-2024-52596— SimpleSAMLphp xml-common XXE vulnerability
Quick assessment
Affected
simplesamlphp xml-common
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SimpleSAMLphp是一款实现了SAML 2.0服务提供者和标识提供者功能的PHP身份验证应用程序。 SimpleSAMLphp存在安全漏洞，该漏洞源于xml-common加载不受信任的XML文档时，会诱发XML外部实体注入。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-52596
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SimpleSAMLphp xml-common XXE vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
SimpleSAMLphp xml-common is a common classes for handling XML-structures. When loading an (untrusted) XML document, for example the SAMLResponse, it's possible to induce an XXE. This vulnerability is fixed in 1.19.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:L/SI:L/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Source: CVE Program / CVE List V5
Vulnerability Title
SimpleSAMLphp 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SimpleSAMLphp是一款实现了SAML 2.0服务提供者和标识提供者功能的PHP身份验证应用程序。 SimpleSAMLphp存在安全漏洞，该漏洞源于xml-common加载不受信任的XML文档时，会诱发XML外部实体注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| simplesamlphp | xml-common | < 1.20.0 | - |
|
II. Public POCs for CVE-2024-52596
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-52596
请登录查看更多情报信息。
Patches & Fixes for CVE-2024-52596 (1)
-
Merge commit from fork · simplesamlphp/xml-common@fa4ade3 · GitHub x_refsource_MISC
Vendor Advisories for CVE-2024-52596 (1)
-
XXE · Advisory · simplesamlphp/xml-common · GitHub x_refsource_CONFIRM
IV. Related Vulnerabilities
Same vendor: simplesamlphp
-
CVE-2026-49289
SimpleSAMLphp SAML2: Possible DoS via XPath Transform -
CVE-2026-49283
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows c -
CVE-2026-49284
SimpleSAMLphp SP accepts a response from an unexpected IdP w -
CVE-2026-46491
SimpleSAMLphp casserver FileSystemTicketStore path traversal -
CVE-2025-65954
SimpleSAMLphp-casserver has an Open Redirect vulnerability
Same weakness: CWE-611
-
CVE-2026-106616
ColdFusion | Improper Restriction of XML External Entity Ref -
CVE-2026-90531
Adobe Experience Manager | Improper Restriction of XML Exter -
CVE-2026-54640
OpenRemote: XXE in KNXProtocol.startAssetImport() allows arb -
CVE-2026-93891
Security Vulnerability identified in IBM TRIRIGA - XXE -
CVE-2026-85970
Improper XML external entity restriction in Progress MarkLog
V. Comments for CVE-2024-52596
No comments yet