Description
The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAML-Toolkits | ruby-saml | < 1.12.3, >= 1.13.0, < 1.17.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | ruby-saml | 1.13.0-1+deb12u1 | DSA-5774-1 |
| Debian 11 | ruby-saml | 1.11.0-1+deb11u1 | DLA-3949-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | ruby-saml | 1.15.0-1ubuntu0.24.04.1 | USN-7309-1 |
| Ubuntu 22.04 LTS | ruby-saml | 1.13.0-1ubuntu0.1 | USN-7309-1 |
| Ubuntu 20.04 LTS | ruby-saml | 1.11.0-1ubuntu0.1 | USN-7309-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | ruby-saml | 1.7.2-1ubuntu0.1~esm1 | USN-7309-1 |
| Ubuntu Pro 16.04 LTS | ruby-saml | 1.1.2-1ubuntu1+esm1 | USN-7309-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 2 repositories
-
synacktiv/CVE-2024-45409 ★ 86 · Oct 7, 2024
Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409) exploit
-
barkotenicholas/CVE-2024-45409 ★ 0 · Oct 25, 2026
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| RubyGems | ruby-saml | < 1.12.3 | 1.12.3 | GHSA-jw9c-mfg7-9rx2 |
| RubyGems | ruby-saml | >= 1.13.0, < 1.17.0 | 1.17.0 | GHSA-jw9c-mfg7-9rx2 |
Advisories 5
- USN-7309-1 Ruby SAML vulnerabilities Ubuntu Security Notices (USN) · Jun 25, 2026
- DSA-5774-1 ruby-saml - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3949-1 ruby-saml - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2024-3626 Illumio Core: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Dec 5, 2024
- WID-SEC-2024-2162 GitLab: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 8, 2024
References
- https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2
- https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq
- https://github.com/SAML-Toolkits/ruby-saml/commit/1ec5392bc506fe43a02dbb66b68741051c5ffeae
- https://github.com/SAML-Toolkits/ruby-saml/commit/4865d030cae9705ee5cdb12415c654c634093ae7