OmniAuth-SAML authentication bypass via incorrect XML canonicalization and DOM traversal

CRÍTICO 9.8CVE-2017-11430 · GHSA-94hm-8q65-rmxm · Published 17/04/2019 · updated 17/06/2026

En resumen

CVE-2017-11430 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a omniauth-saml, omniauth saml (omniauth).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.4%, mayor que el 84.3% de las vulnerabilidades.
Solución: actualizar a 1.10.0 o posterior.

Package	Affected versions	Patched versions
omniauth-saml RubyGems	`< 1.10.0`	`1.10.0`
omniauth saml omniauth	`≤ 1.9.0`	No fix yet

Description

OmniAuth OmniAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

NVD description

OmniAuth OmnitAuth-SAML 1.9.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.

References

nvd.nist.gov/vuln/detail/CVE-2017-11430 · ADVISORY
duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations · WEB
omniauth/omniauth-saml · PACKAGE
rubysec/ruby-advisory-db · WEB
kb.cert.org/vuls/id/475445 · WEB

Más vulnerabilidades de omniauth-saml

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

omniauth-saml

RubyGems

< 1.10.0

1.10.0

omniauth saml

omniauth

≤ 1.9.0

No fix yet

Description

NVD description