Skip to content
OpenAdvisories

Product · OneLogin

Ruby-SAML

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2017-11428

    Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

    OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attac…

    OneLogin Ruby-SAML ruby-saml ruby-saml Debian Ubuntu RubyGems