GitHub Advisoryadvisory · npm

GHSA-r683-v43c-6xqv samlify SAML Signature Wrapping attack

CRITICAL Published 2025-05-19 Modified 2025-05-19 Official page ↗
Aliases
CVE-2025-47949
Ecosystem
npm
Packages
samlify
Severity
Critical
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
Weaknesses
CWE-347
Reviewed
2025-05-19

Affected packages

• npm samlify: < 2.10.0 → fixed in 2.10.0

Description

A Signature Wrapping attack has been found in samlify <v2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider.

Related

Alias · CVE (1)

  • CVE-2025-47949 samlify is a Node.js library for SAML single sign-on. vulnerability

Weakness · CWE (1)

  • CWE-347 Improper Verification of Cryptographic Signature weakness

References