Skip to content
OpenAdvisories

Vendor

Sustainsys

3 known vulnerabilities.

Products

Saml2 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-41890

    Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation

    Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provider. Prior to versions 1.0.3 and 2.9.2, when a response is processed, the issuer of the Identity Provider is not sufficiently validated. Th…

    Sustainsys Saml2 Sustainsys.Saml2 Kentor.AuthServices NuGet
  • High 8.2
    CVE-2020-5261

    Missing Token Replay Detection

    Saml2 Authentication services for ASP.NET (NuGet package Sustainsys.Saml2) greater than 2.0.0, and less than version 2.5.0 has a faulty implementation of Token Replay Detection. Token Replay Detection is an important defence in depth measure for Single Sign O…

    Sustainsys Saml2 Sustainsys.Saml2 NuGet