CVE-2019-15537: Cesnet Proxystatistics

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

The proxystatistics module before 3.1.0 for SimpleSAMLphp allows SQL Injection in lib/Auth/Process/DatabaseCommand.php.

Affected products

• Cesnet Proxystatistics: before 3.1.0 (fixed in 3.1.0)

Published 2019-08-23. Last modified 2026-06-17.