PT-2024-21111 · Samly · Samly

Idyll · Published 2024-02-10 · Updated 2024-10-21 · CVE-2024-25718

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samly package versions prior to 1.4.0 for Elixir

Description The issue arises from the Samly.State.Store.get assertion/3 function, which can return an expired session. This interferes with access control because Samly.AuthHandler uses a cached session and does not replace it, even after expiry.

Recommendations For versions prior to 1.4.0, update to version 1.4.0 or later to resolve the issue. As a temporary workaround, consider disabling the Samly.State.Store.get assertion/3 function until a patch is available. Restrict access to the Samly.AuthHandler to minimize the risk of exploitation.

Fix

Resource Exhaustion

Insufficient Session Expiration

Weakness Enumeration

CWE-400

CWE-613

Related Identifiers

CVE-2024-25718

GHSA-H3RW-77W7-92GF

Affected Products

Samly

References · 16

• https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb · Patch
• https://github.com/dropbox/samly/pull/13 · Patch
• https://osv.dev/vulnerability/GHSA-h3rw-77w7-92gf · Vendor Advisory
• https://diff.hex.pm/diff/samly/1.3.0..1.4.0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-25718 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25718 · Vendor Advisory
• https://github.com/handnot2/samly · Note
• https://github.com/dropbox/samly · Note
• https://github.com/dropbox/samly/commit/7637ebeef6c6b88ec2032f5323c32edcebbacbc6 · Note
• https://t.me/cvenotify/70974 · Telegram Post
• https://t.me/cvenotify/99018 · Telegram Post
• https://t.me/cvenotify/88322 · Telegram Post
• https://twitter.com/Esparta6108713/status/1756572698522612083 · Twitter Post
• https://hex.pm/packages/samly · Note
• https://twitter.com/VulmonFeeds/status/1756568074596073941 · Twitter Post