CVE-2010-10002 SimpleSAMLphp simplesamlphp-module-openid OpenID consumer.php cross site scripting
Remote attackers can execute arbitrary scripts via the AuthState argument in the OpenID consumer template, potentially compromising user sessions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-10002?
CVE-2010-10002 is a low-severity cross-site scripting vulnerability in simplesamlphp-module-openid, published on 1 Jan 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in SimpleSAMLphp simplesamlphp-module-openid. Affected is an unknown function of the file templates/consumer.php of the component OpenID Handler. The manipulation of the argument AuthState leads to cross site scripting. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 1.0 is able to address this issue. The patch is identified as d652d41ccaf8c45d5707e741c0c5d82a2365a9a3. It is recommended to upgrade the affected component. VDB-217170 is the identifier assigned to this vulnerability. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Weakness: CWE-79
Which versions are affected by CVE-2010-10002?
2 open source packages ship an affected version, including simplesamlphp/simplesamlphp-module-openid. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
simplesamlphp/simplesamlphp-module-openid Packagist | All versions | 1.0 |
simplesamlphp/simplesamlphp-module-openid Packagist | All versions | 1.0 |
Products include Simplesamlphp Simplesamlphp-Module-Openid.
How do I fix CVE-2010-10002?
Upgrade simplesamlphp/simplesamlphp-module-openid to 1.0 or later.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2010-10002 being exploited?
There is no known exploitation of CVE-2010-10002 in the wild and no public exploit code.
Sources
Also known as GHSA-ggj9-6x8j-49w9.