The vulnerability in the software implementation of the SAML protocol simpleamlphp/saml2 and the XML document security processing programs simpleamlphp/xml-security, related to insufficient verification of data authenticity, allows a perpetrator to create false SAML messages.

The vulnerability of the SAML protocol implementation in simpleamlphp/saml2 and the XML document security processing in simpleamlphp/xml-security is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to create a fake SAML message...

CVE-2023-49087: Insufficient Verification of Data Authenticity

xml-security is a library that implements XML signatures and encryption. Validation of an XML signature requires verification that the hash value of the related XML-document matches a specific DigestValue-value, but also that the cryptographic signature on the SignedInfo-tree the one that contain...