Critical severity · published Nov 28, 2022
CVE-2022-41912
The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements
9.8
CVSS
2.3%
EPSS
No
On KEV
Description
The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Saml · Saml Project
before 0.4.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-41912
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-41912
Third Party Advisory
http://packetstormsecurity.com/files/170356/crewjam-saml-Signature-Bypass.html
Patch
https://github.com/crewjam/saml/commit/aee3fb1edeeaf1088fcb458727e0fd863d277f8b
Third Party Advisory
https://github.com/crewjam/saml/security/advisories/GHSA-j2jp-wvqg-wc2g
More from Saml
9.8
CVE-2020-27846
A signature verification vulnerability exists in crewjam/saml
7.5
CVE-2023-28119
The crewjam/saml go library contains a partial implementation of the SAML standard in golang
6.1
CVE-2023-45683
Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/saml