1. Forum
  2. FidoNet
  3. SECURITY

  • crewjam/saml Signature Bypass

    From Security Bot@2:250/1 to All on Sun Apr 9 00:22:00 2023


    crewjam/saml Signature Bypass

    The crewjam/saml go library is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.

    https://packetstormsecurity.com/files/170356/GS20230102143226.tgz

    Mon, 02 Jan 2023 14:32:28 GMT
    ________________________________
    --- The information is for inforamtional purposes only.
    * Origin: Read us with http://winpoint.org JID: rs@captflint.com