GitHub Advisoryadvisory · RubyGems

GHSA-36p7-xjw8-h6f2 Ruby-saml allows attackers to perform XML signature wrapping attacks

HIGH Published 2018-08-21 Modified 2023-08-28 Official page ↗
Aliases
CVE-2016-5697
Ecosystem
RubyGems
Packages
ruby-saml
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-91
Reviewed
2020-06-16

Affected packages

• RubyGems ruby-saml: < 1.3.0 → fixed in 1.3.0

Description

ruby-saml prior to version 1.3.0 is vulnerable to an XML signature wrapping attack in the specific scenario where there was a signature that referenced at the same time 2 elements (but past the scheme validator process since 1 of the element was inside the encrypted assertion). ruby-saml users must update to 1.3.0, which implements 3 extra validations to mitigate this kind of attack.

Related

Alias · CVE (1)

  • CVE-2016-5697 Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors. vulnerability

Weakness · CWE (1)

  • CWE-91 XML Injection weakness

References