Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2025/11/06 3:2 p.m.1 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. Mitigation Mitigation fo...

7.5CVSS6.2AI score0.00059EPSS
Exploits1References5
NVD
NVD
added 2025/11/05 3:15 p.m.1 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS0.00059EPSS
Exploits1References2
OSV
OSV
added 2025/11/05 3:15 p.m.2 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS6.8AI score
Exploits0References2
Debian CVE
Debian CVE
added 2025/11/05 2:56 p.m.2 views

CVE-2025-46705

A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

7.5CVSS5.3AI score0.00059EPSS
Exploits1
Talos
Talos
added 2025/11/05 12:0 a.m.3 views

Entr'ouvert Lasso g_assert_not_reached denial of service vulnerability

Talos Vulnerability Report TALOS-2025-2196 Entr'ouvert Lasso gassertnotreached denial of service vulnerability November 5, 2025 CVE Number CVE-2025-46705 SUMMARY A denial of service vulnerability exists in the gassertnotreached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially craft...

7.5CVSS7AI score0.00059EPSS
Exploits1
CNNVD
CNNVD
added 2025/11/05 12:0 a.m.1 views

Entrouvert Lasso 安全漏洞

Entrouvert Lasso is a single sign-on protocol implementation library open-sourced by Entrouvert France. A security vulnerability exists in Entrouvert Lasso versions 2.5.1 and 2.8.2, which stems from a flaw in the gassertnotreached function that could lead to a denial of service attack...

7.5CVSS6.2AI score0.00059EPSS
Exploits1References2
Rows per page
Query Builder