A vulnerability was found in SimpleSAMLphp saml2 up to 4.6.13/5.0.0-alpha.17. It has been classified as critical. Affected is an unknown function of the component XML Document Handler. The manipulation leads to xml external entity reference.

This vulnerability is traded as CVE-2024-52806. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.