CVE-2017-18121: Debian Linux

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an attacker to craft links that could execute arbitrary JavaScript code on the victim's web browser.

Affected products

• Debian Debian Linux: version 7.0 only; version 8.0 only; version 9.0 only
• Simplesamlphp Simplesamlphp: up to and including 1.14.15

Published 2018-02-02. Last modified 2026-06-17.