Description

An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.

Remediation

References

https://www.whitehats.nl/blog/xml-signature-wrapping-samlify

https://github.com/tngan/samlify/releases/tag/v2.3.0

Related Vulnerabilities

CVE-2021-23648 Vulnerability in npm package @braintree/sanitize-url

CVE-2017-5651 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2016-10623 Vulnerability in npm package macaca-chromedriver-zxa

CVE-2022-23540 Vulnerability in maven package org.webjars.npm:jsonwebtoken

CVE-2016-10615 Vulnerability in npm package curses

Severity

High

Classification

CWE-91 CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Mitigation Third Party Advisory Issue Tracking Patch Release Notes