Skip to content
OpenAdvisories

Package · Debian

python-pysaml2

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-5390

    Improper Verification of Cryptographic Signature in PySAML2

    PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in diffe…

    pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI
  • High 8.1
    CVE-2017-1000433

    pysaml2 Improper Authentication vulnerability

    pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user without knowing their password.

    pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI
  • High 7.5
    CVE-2016-10149

    Pysaml2 does not sanitize XML responses

    XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.

    pysaml2 python-pysaml2 python-pysaml2 Debian Ubuntu PyPI