GO-2022-1129

vendorUSosv

Authentication bypass in github.com/crewjam/saml

view advisory published 2022-11-29Licence: per source

Authentication bypass is possible when processing SAML responses containing multiple Assertion elements.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-41912US	critical9.8	2.33% (83rd)	—	2022-11-28
The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has b…

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.