CVE-2024-45409

🗓️ 10 Sep 2024 18:50:12Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 451 Views🌐 WEB

The Ruby SAML library allows unauthenticated attackers to forge a SAML Response/Assertion, leading to arbitrary user login

Reporter	Title	Published	Views	Family All 58
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Onelogin Ruby-Saml	25 Oct 202606:38	–	githubexploit
GithubExploit	Exploit for Improper Verification of Cryptographic Signature in Onelogin Ruby-Saml	7 Oct 202409:24	–	githubexploit
GithubExploit	Safeguard-Exploit-Vault	28 Jun 202606:11	–	githubexploit
GithubExploit	HackTheBox	7 Jun 202617:19	–	githubexploit
FreeBSD	Gitlab -- vulnerabilities	17 Sep 202400:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Aspera Shares is vulnerable to bypass security restrictions and an external entity injection (CVE-2024-45409, CVE-2025-0162)	10 Mar 202518:42	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Shares	5 Dec 202514:45	–	ibm
BDU FSTEC	SAML Ruby Privilege Escalation	19 Sep 202400:00	–	bdu_fstec
Chainguard	CVE-2024-45409 vulnerabilities	10 Sep 202419:15	–	cgr
Circl	CVE-2024-45409	10 Sep 202421:46	–	circl

NVD

Vulners

Vulnrichment

Node

onelogin ruby-samlRange<1.12.3

onelogin ruby-samlRange1.13.0–1.17.0

Node

omniauth omniauth_samlRange≤1.10.3ruby

omniauth omniauth_samlMatch2.0.0ruby

omniauth omniauth_samlMatch2.1.0ruby

Node

gitlab gitlabRange<16.11.10

gitlab gitlabRange17.0.0–17.0.8

gitlab gitlabRange17.1.0–17.1.8

gitlab gitlabRange17.2.0–17.2.7

gitlab gitlabRange17.3.0–17.3.3

[
  {
    "vendor": "SAML-Toolkits",
    "product": "ruby-saml",
    "versions": [
      {
        "version": "< 1.12.3",
        "status": "affected"
      },
      {
        "version": ">= 1.13.0, < 1.17.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/SAML-Toolkits/ruby-saml/commit/1ec5392bc506fe43a02dbb66b68741051c5ffeae
github	www.github.com/SAML-Toolkits/ruby-saml/commit/4865d030cae9705ee5cdb12415c654c634093ae7
github	www.github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq
github	www.github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2
security	www.security.netapp.com/advisory/ntap-20240926-0008/
ssoready	www.ssoready.com/blog/engineering/ruby-saml-pwned-by-xml-signature-wrapping-attacks/
news	www.news.ycombinator.com/item
lists	www.lists.debian.org/debian-lts-announce/2024/11/msg00006.html

Parameter	Position	Path	Description	CWE
GET	path	/api/config	Endpoint to get or set AI configuration.	CWE-347
POST	path	/api/config	Endpoint to get or set AI configuration.	CWE-347
GET	path	/api/scan/status	Endpoint to check the current status of a scan.	CWE-347
POST	path	/api/scan/start	Endpoint to trigger a new security scan.	CWE-347
GET	path	/api/exploits	Endpoint to list exploits with search, severity, and sort parameters.	CWE-347
GET	path	/api/exploits/	Endpoint to view exploit details and source code.	CWE-347
GET	path	/api/exploits//download	Endpoint to download a PoC script.	CWE-347
GET	path	/api/exploits/refresh	Endpoint to rebuild the exploit index from headers.	CWE-347
POST	path	/api/ai/chat	Endpoint to send a message to the AI assistant.	CWE-347
POST	path	/api/ai/analyze	Endpoint to analyze scan results via AI.	CWE-347

17 Jun 2026 07:54Current

7.9High risk

Vulners AI Score7.9

CVSS 3.19.8 - 10

EPSS0.10684

SSVC