8 matches found
python313-pysaml2-7.5.4-1.1 on GA media (moderate)
python313-pysaml2-7.5.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:11524-1 Rating: moderate Cross-References: CVE-2020-5390 CVE-2021-21238 CVE-2021-21239 CVSS scores: CVE-2020-5390 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVE-2021-21238 SUSE : 6.5...
Linux Distros Unpatched Vulnerability : CVE-2021-21238
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability...
CVE-2021-21238
A verification flaw was found in python-pysaml2, where it did not validate signed SAML documents against an XML schema. Because the flaw allowed invalid XML documents to be processed, a network attacker could exploit this flaw by tricking pysaml2 with a wrapped signature. Mitigation Mitigation fo...
CVE-2021-21238
creationtimestamp| type| source ---|---|--- 2021-01-21 18:28:14+00:00| seen| https://t.me/cibsecurity/22495 2024-04-13 13:18:43+00:00| seen| https://t.me/arpsyndicate/4659...
UBUNTU-CVE-2021-21238
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping...
satosa (>=3.3.1, <=3.4.0) potentially affected by CVE-2021-21238 via pysaml2 (4.2.0)
pysaml2 PYPI version 4.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pysaml2 and may be impacted: - satosa =3.3.1, =3.4.0 Source cves: CVE-2021-21238 Source advisory: OSV:PYSEC-2021-48...
CVE-2021-21238
PySAML2 (Python-based SAML 2.0 implementation) is affected by an improper verification of cryptographic signatures in versions prior to 6.5.0. The flaw is a variant of XML Signature wrapping: PySAML2 did not validate the SAML document against an XML schema, allowing an invalid XML document with a...
