[MEDIUM] Open redirection protection bypass

PKSA-b12x-6nzb-bjj1 CVE-2018-6520 GHSA-2qfc-48v5-4w5h

Affected package: simplesamlphp/simplesamlphp

Affected version: <1.15.2

Reported by:
GitHub, FriendsOfPHP/security-advisories