CVE-2017-1000452

NONE EPSS 68.8%
Published Jan 2, 20188y ago · Modified Jun 17, 20262w ago
Find Similar
Published Jan 2, 2018 8y ago
Last Modified Jun 17, 2026 2w ago

Description

An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.

Threat Intelligence

EPSS Exploit Probability
68.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-91

Affected Products 1

VendorProductVersionRange
samlify_projectsamlify* ≤2.2.0

References 2

  • github.com https://github.com/tngan/samlify/releases/tag/v2.3.0
    Issue TrackingPatchRelease NotesThird Party Advisory
  • whitehats.nl https://www.whitehats.nl/blog/xml-signature-wrapping-samlify
    MitigationThird Party Advisory

Remediation

  • github.com https://github.com/tngan/samlify/releases/tag/v2.3.0
    Issue TrackingPatchRelease NotesThird Party Advisory