Skip to content
OpenAdvisories

Vendor

omniauth

2 known vulnerabilities.

Products

omniauth 1 OmnitAuth-SAML 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2017-11430

    Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

    OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the …

    omniauth OmnitAuth-SAML omniauth-saml RubyGems