CVE-2024-36383

The Logpoint SAML Authentication application (versions prior to 6.0.3 ) is vulnerable to an arbitrary file deletion flaw. An attacker can provide a crafted filename in the state field of a SAML SSO-URL response , causing the system to delete the file corresponding to that name due to incorrect ex...