Skip to content
OpenAdvisories

Product · dropbox

samly

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-53424

    Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions

    Authentication Bypass by Capture-replay vulnerability in dropbox samly allows an attacker to authenticate as the subject of a captured SAML assertion by resubmitting it. Samly.Helper.decode_idp_auth_resp/3 in lib/samly/helper.ex calls esaml_sp:validate_assert…

    dropbox handnot2 samly samly Hex