Security Advisory

CVE-2022-41912

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-28 00:00:00

Last updated 2025-04-23 16:34:38

Assigner GitHub_M

State PUBLISHED

Description

The crewjam/saml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.

← Browse all CVEs View on cve.org ↗