CVE-2018-5387

2018-07-2415:00:00

CWE-287

certcc

www.cve.org

EPSS

0.002

Percentile

56.8%

JSON

Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

CNA Affected

[
  {
    "product": "SAMLBase",
    "vendor": "Wizkunde",
    "versions": [
      {
        "lessThan": "1.2.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]