GHSA-r8v4-7vwj-983x

Suggest an improvement
Source
https://github.com/advisories/GHSA-r8v4-7vwj-983x
Import Source
https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-r8v4-7vwj-983x/GHSA-r8v4-7vwj-983x.json
JSON Data
https://api.test.osv.dev/v1/vulns/GHSA-r8v4-7vwj-983x
Aliases
Published
2022-05-14T03:40:37Z
Modified
2024-12-07T05:40:35.229926Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
SimpleSAMLphp SAML2 spoof SAML responses
Details

The validateSignature method in the SAML2\Utils class in SimpleSAMLphp before 1.14.10 and simplesamlphp/saml2 library before 1.9.1, 1.10.x before 1.10.3, and 2.x before 2.3.3 allows remote attackers to spoof SAML responses or possibly cause a denial of service (memory consumption) by leveraging improper conversion of return values to boolean.

Database specific
{
    "nvd_published_at": "2017-02-17T02:59:00Z",
    "cwe_ids": [],
    "severity": "CRITICAL",
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-25T21:00:15Z"
}
References

Affected packages

Packagist / simplesamlphp/saml2

Package

Name
simplesamlphp/saml2
Purl
pkg:composer/simplesamlphp/saml2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.10
Fixed
1.10.3

Affected versions

v1.*

v1.10
v1.10.1
v1.10.2

Packagist / simplesamlphp/saml2

Package

Name
simplesamlphp/saml2
Purl
pkg:composer/simplesamlphp/saml2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.8.1

Affected versions

v0.*

v0.1.0-alpha
v0.1.0
v0.3.0
v0.4.0
v0.4.1
v0.4.2
v0.5.0
v0.6.0
v0.6.1
v0.6.2
v0.6.3
v0.6.4
v0.7.0
v0.7.1
v0.8.0
v0.8.1

v1.*

v1.0.0
v1.1.0
v1.2.0
v1.3.0
v1.3.1
v1.3.2
v1.4.0
v1.5.0
v1.5.1
v1.5.2
v1.5.3
v1.5.4
v1.6.0
v1.6.1
v1.7.0
v1.7.1
v1.7.2
v1.8

Packagist / simplesamlphp/saml2

Package

Name
simplesamlphp/saml2
Purl
pkg:composer/simplesamlphp/saml2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.9.0
Fixed
1.9.1

Packagist / simplesamlphp/saml2

Package

Name
simplesamlphp/saml2
Purl
pkg:composer/simplesamlphp/saml2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.0
Fixed
2.3.3

Affected versions

v2.*

v2.0.0
v2.0.1
v2.1
v2.2
v2.3
v2.3.1
v2.3.2