DEBIAN-CVE-2021-21238
- Source
- https://security-tracker.debian.org/tracker/CVE-2021-21238
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2021-21238.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2021-21238
- Upstream
- Published
- 2021-01-21T15:15:14Z
- Modified
- 2025-09-19T06:18:23Z
- Summary
- [none]
- Details
-
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0.
- References
Affected packages
Debian:11 / python-pysaml2
Package
- Name
- python-pysaml2
- Purl
- pkg:deb/debian/python-pysaml2?arch=source
Debian:12 / python-pysaml2
Package
- Name
- python-pysaml2
- Purl
- pkg:deb/debian/python-pysaml2?arch=source
Debian:13 / python-pysaml2
Package
- Name
- python-pysaml2
- Purl
- pkg:deb/debian/python-pysaml2?arch=source
Debian:14 / python-pysaml2
Package
- Name
- python-pysaml2
- Purl
- pkg:deb/debian/python-pysaml2?arch=source