GitHub Advisoryadvisory · npm

GHSA-5p8w-2mvw-38pv Signature bypass via multiple root elements

HIGH Published 2022-10-12 Modified 2022-10-14 Official page ↗
Aliases
CVE-2022-39300
Ecosystem
npm
Packages
node-saml
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-347
Reviewed
2022-10-12

Affected packages

• npm node-saml: < 4.0.0-beta.5 → fixed in 4.0.0-beta.5

Description

Impact A remote attacker may be able to bypass SAML authentication on a website using passport-saml. A successful attack requires that the attacker is in possession of an arbitrary IDP signed XML element. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. Patches Users should upgrade to node-saml v4.0.0-beta5 or newer. Workarounds Disable SAML authentication. References _Are there any links users can visit to find out more?_ For more information If you have any questions or comments about this advisory: • Open a discussion in the node-saml repo Credits • Felix Wilhelm of Google Project Zero

Related

Alias · CVE (1)

  • CVE-2022-39300 node SAML is a SAML 2.0 library based on the SAML implementation of passport-saml. vulnerability

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References