High · 7.5 CVE-2017-1000452 EUVD-2018-0156GHSA-8jjf-w7j6-323c

Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames

Published Jan 2, 2018 · Updated Sep 17, 2024 · Assigned by mitre

Description

An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
npm	samlify	< 2.4.0-rc5	2.4.0-rc5	GHSA-8jjf-w7j6-323c

References

https://github.com/tngan/samlify/releases/tag/v2.3.0
https://www.whitehats.nl/blog/xml-signature-wrapping-samlify