CVE-2022-39300

node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the...

CVE-2022-39300 Signature bypass via multiple root elements in node-SAML

node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the...

Sahana 0.6.2.2 Authentication Bypass

Ability to completely disable authentication via stream.php and commented out module authentication code within it. http://victim//index.php?mod=admin&act=aclenableacl Authenticates correctly. http://victim//stream.php?mod=admin&act=aclenableacl Does not...