Input Validation and Logic

Every one of the 4 is a mark on the map. Named now: 1 to 4, most at risk first.

1. The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an authentication source defined in config/…CVE-2017-12869Simplesamlphp · 2.4% likely

   CWE-20

2. The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signature validation utilities.CVE-2017-12874Simplesamlphp · 1.3% likely

   CWE-20

3. The SimpleSAML_XML_Validator class constructor in SimpleSAMLphp before 1.14.11 might allow remote attackers to spoof signatures on SAML 1 responses or possibly cause a denial of s…CVE-2016-9955Simplesamlphp · 1.2% likely

   CWE-20

4. simplesamlphp before 1.6.3 (squeeze) and before 1.8.2 (sid) incorrectly handles XML encryption which could allow remote attackers to decrypt or forge messages.CVE-2011-4625simplesamlphp · 0.7% likely

   CWE-755

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.