PT-2023-10309 · Ruby · Ruby-Saml

Reedloden · Published 2023-05-27 · Updated 2025-01-14 · CVE-2015-20108

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ruby-saml gem versions prior to 1.0.0

Description The issue allows XPath injection and code execution in the ruby-saml gem because prepared statements are not used. This is related to the xml security.rb file.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the xml security.rb file until a patch is available.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2015-20108

GHSA-R364-2PJ4-PF7F

Affected Products

Ruby-Saml

References · 19

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2015-20108.yml · Exploit
• https://github.com/SAML-Toolkits/ruby-saml/compare/v0.9.2...v1.0.0 · Patch
• https://github.com/SAML-Toolkits/ruby-saml/commit/9853651b96b99653ea8627d757d46bfe62ab6448 · Patch
• https://osv.dev/vulnerability/CVE-2015-20108 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-20108 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-20108 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-20108 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-20108 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2015-20108 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-20108 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-r364-2pj4-pf7f · Vendor Advisory
• https://github.com/SAML-Toolkits/ruby-saml · Note
• https://github.com/SAML-Toolkits/ruby-saml/pull/225 · Note
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/OSVDB-124991.yml · Note
• https://security.netapp.com/advisory/ntap-20230703-0003 · Note