New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2024-45409: SAML authentication bypass via Incorrect XPath selector #809

Closed

fauresebast opened this issue Sep 11, 2024 · 0 comments · Fixed by #810

fauresebast commented Sep 11, 2024

Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response.
An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML
Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within
the vulnerable system.

GHSA-jw9c-mfg7-9rx2

fauresebast mentioned this issue

Add CVE-2024-45409 for ruby-saml and omniauth-saml #810

Merged

postmodern closed this as completed in #810

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment