django-saml2-auth (>=1.0.2 <=1.1.4), django-saml2-auth-custom (>=1.0.0 <=1.0.4) +6 more potentially affected by CVE-2020-5390 via pysaml2 (>=4.0.2 <=4.8.0)

🗓️ 06 May 2020 19:41:29Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 osv.dev👁 6 Views

Django SAML2 packages depend on pysaml2 versions affected by CVE-2020-5390.

Reporter	Title	Published	Views	Family All 59
BDU FSTEC	The vulnerability of the authentication library for exchanging identification data according to the SAML2 standard, related to incorrect verification of the cryptographic signature of the data, allows a perpetrator to bypass the signature verification and gain access to protected information.	22 Dec 202000:00	–	bdu_fstec
CNVD	PySAML2 XML Signature Wrapper Vulnerability	14 Jan 202000:00	–	cnvd
CVE	CVE-2020-5390	13 Jan 202018:11	–	cve
Cvelist	CVE-2020-5390	13 Jan 202018:11	–	cvelist
Debian	[SECURITY] [DLA 2119-1] python-pysaml2 security update	26 Feb 202011:17	–	debian
Debian	[SECURITY] [DSA 4630-1] python-pysaml2 security update	21 Feb 202020:21	–	debian
Debian CVE	CVE-2020-5390	13 Jan 202018:11	–	debiancve
Tenable Nessus	Debian DLA-2119-1 : python-pysaml2 security update	27 Feb 202000:00	–	nessus
Tenable Nessus	Debian DSA-4630-1 : python-pysaml2 - security update	24 Feb 202000:00	–	nessus
Tenable Nessus	Ubuntu 16.04 LTS / 18.04 LTS : PySAML2 vulnerability (USN-4245-1)	22 Jan 202000:00	–	nessus

23 Oct 2024 16:03Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5

EPSS0.01207

pysaml2 vulnerability transitive dependencies django saml2 affected versions security advisory