Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-1735 EUVD-2024-0511GHSA-4m6j-23p2-8c54

Armeria SAML authentication bypass due to missing validation on unsigned SAML messages

Published Feb 26, 2024 · Updated Aug 26, 2025 · Assigned by LY-Corporation

Description

A vulnerability has been identified in armeria-saml versions less than 1.27.2, allowing the use of malicious SAML messages to bypass authentication. All users who rely on armeria-saml older than version 1.27.2 must upgrade to 1.27.2 or later.

Affected products

VendorProductAffectedFixed
LINE Armeria 0.69.0 – < 1.27.2 1.27.2

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.linecorp.armeria:armeria-saml < 1.27.2 1.27.2 GHSA-4m6j-23p2-8c54

References