Vulnerability GHSA-j2jp-wvqg-wc2g
Critical
CRITICAL RISK
CVSS Score: 9.1
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
3 years ago
November 29, 2022 at 11:55 PM UTC
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
v0.3.0 - v0.4.8
v0.3.0 - v0.4.8
Summary
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
Details
Impact
The crewjam/saml go library is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.
Patches
This issue has been corrected in version 0.4.9.
Credit
This issue was reported by Felix Wilhelm from Google Project Zero.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Nil-pointer panic in validateAssertion and namespace-blind Subject.NameID in github.com/crewjam/saml
v0.3.0 - v0.5.1 GO-2026-6909
v0.3.0 - v0.5.1 GO-2026-6909
Unknown
3 years ago
Cross-site scripting via missing binding syntax validation in github.com/crewjam/saml
v0.3.0 - v0.4.13 GO-2023-2114
v0.3.0 - v0.4.13 GO-2023-2114
High Risk
3 years ago
Cross-site Scripting via missing Binding syntax validation
v0.3.0 - v0.4.13 GHSA-267v-3v32-g6q5
v0.3.0 - v0.4.13 GHSA-267v-3v32-g6q5
Unknown
3 years ago
Denial of service via deflate compression bomb in github.com/crewjam/saml
v0.3.0 - v0.4.12 GO-2023-1664
v0.3.0 - v0.4.12 GO-2023-1664
High Risk
3 years ago
crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb
v0.3.0 - v0.4.12 GHSA-5mqj-xc49-246p
v0.3.0 - v0.4.12 GHSA-5mqj-xc49-246p
Impacted packages
Timeline
Published
3 years ago
November 29, 2022 at 11:55 PM UTC
Fixed (v0.4.9)
3 years ago
November 28, 2022 at 01:48 PM UTC
Last Modified
2 years ago
November 08, 2023 at 04:10 AM UTC