Lucene search
Veracode Vulnerability DatabaseVERACODE:38149HistoryNov 22, 2022 - 5:45 a.m.
Authentication Bypass
2022-11-2205:45:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
vulnerability
authentication
service provider
saml
github
signature bypass
EPSS
0.006
Percentile
78.0%
github.com/crewjam/saml is vulnerable to authentication bypass. The vulnerability exists in multiple functions of service_provider.go when processing SAML responses containing multiple assertion elements which allows an attacker to bypass the signature.
Related
redhatcve
redhatcve
nvd
nvd
CVE-2022-41912
2022-11-28 15:15:10
github
github
ubuntucve
ubuntucve
CVE-2022-41912
2022-11-28 00:00:00
cve
cve
CVE-2022-41912
2022-11-28 15:15:10
debiancve
debiancve
CVE-2022-41912
2022-11-28 15:15:10
openvas
openvas
prion
prion
Authentication flaw
2022-11-28 15:15:00
redhat
redhat
osv
osv
crewjam/saml vulnerable to signature bypass via multiple Assertion elements due to improper authentication
2022-11-29 23:55:54
CVE-2022-41912
2022-11-28 15:15:10
Authentication bypass in github.com/crewjam/saml
2022-11-29 18:03:21
cvelist
cvelist
ibm
ibm
freebsd
freebsd
Grafana -- Stored XSS in ResourcePicker component
2022-12-16 00:00:00
Grafana -- Spoofing originalUrl of snapshots
2023-01-25 00:00:00