Skip to content
OpenAdvisories

Package · Go

github.com/ssoready/ssoready

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2024-47832

    XML Signature Bypass via differential XML parsing in ssoready

    ssoready is a single sign on provider implemented via docker. Affected versions are vulnerable to XML signature bypass attacks. An attacker can carry out signature bypass if you have access to certain IDP-signed messages. The underlying mechanism exploits dif…

    ssoready ssoready github.com/ssoready/ssoready Go