Skip to content
OpenAdvisories

Product · auth0

passport-wsfed-saml2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2022-23505

    Passport-wsfed-saml2 vulnerable to Authentication Bypass for WSFed authentication

    Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In versions prior to 4.6.3, a remote attacker may be able to bypass WSFed authentication on a website using passport-wsfed-saml2. A successful attack requi…

    auth0 passport-wsfed-saml2 passport-wsfed-saml2 npm