PT-2023-32981 · Unknown · Passport-Wsfed-Saml2

Publicado 2023-06-21 · Atualizado 2023-06-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions passport-wsfed-saml2 versions prior to 3.0.10

Description A vulnerability was found in the validation of a SAML signature, where the validation doesn't ensure that the Signature tag is at the proper location inside an Assertion tag. This leads to a signature relocation attack, allowing an authenticated attacker to corrupt one field of data while maintaining the signature valid. The attacker could remove one group from the assertion or corrupt another field of an assertion.

Recommendations For versions prior to 3.0.10, upgrade the passport-wsfed-saml2 library to version 3.0.10 or above.

Identificadores relacionados

GHSA-5WRG-8FXP-CX9R

Produtos afetados

Passport-Wsfed-Saml2

Referências · 5

• https://github.com/auth0/passport-wsfed-saml2/pull/79 · Nota
• https://github.com/auth0/passport-wsfed-saml2 · Nota
• https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-5wrg-8fxp-cx9r · Nota
• https://github.com/auth0/passport-wsfed-saml2/commit/f75211d42d2586a0d24a9da29ba8590e42363500 · Nota
• https://osv.dev/vulnerability/GHSA-5wrg-8fxp-cx9r · Aviso do Fabricante