Author: sixtomartin

Alerts (0)

No open alerts.

Show 1 resolved alert

Medium code_scan_delta OneLogin SAML SSO Resolved · fp_base64_saml_encoding 1d ago

Slug onelogin-saml-sso

Previous version 3.4.0

Current version 3.6.0

New findings

Pattern	Kind	File	Line	Snippet	Confidence
`base64_decode`	`builtin`	`php/lib/Saml2/Auth.php`	142	$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));	`medium`
`gzinflate`	`builtin`	`php/lib/Saml2/Auth.php`	142	$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));	`medium`
`base64_decode`	`builtin`	`php/lib/Saml2/LogoutResponse.php`	174	if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {	`medium`
`base64_decode`	`builtin`	`php/lib/Saml2/LogoutRequest.php`	330	if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {	`medium`

New finding count 4

View raw JSON

{
    "slug": "onelogin-saml-sso",
    "previous_version": "3.4.0",
    "current_version": "3.6.0",
    "new_findings": [
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/Auth.php",
            "line": 142,
            "snippet": "$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));",
            "confidence": "medium"
        },
        {
            "pattern": "gzinflate",
            "kind": "builtin",
            "file": "php/lib/Saml2/Auth.php",
            "line": 142,
            "snippet": "$inResponseTo = OneLogin_Saml2_LogoutRequest::getID(gzinflate(base64_decode($_GET['SAMLRequest'])));",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/LogoutResponse.php",
            "line": 174,
            "snippet": "if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {",
            "confidence": "medium"
        },
        {
            "pattern": "base64_decode",
            "kind": "builtin",
            "file": "php/lib/Saml2/LogoutRequest.php",
            "line": 330,
            "snippet": "if (!$objKey->verifySignature($signedQuery, base64_decode($_GET['Signature']))) {",
            "confidence": "medium"
        }
    ],
    "new_finding_count": 4
}

Plugins authored (1)

Plugin	Version	Installs	Last updated	Status
OneLogin SAML SSO ·`onelogin-saml-sso`	3.6.0	7k+	1d ago	Active

SVN commit access (1)

Plugins this account has pushed commits to, reconstructed from plugins.svn.wordpress.org. A new name showing up here on an established plugin is the strongest ownership-transfer signal.

Plugin	Primary author	Installs	Commits	First	Latest	Status
OneLogin SAML SSO	sixtomartin	7k+	2	4y ago	6mo ago	Active