CBC Padding Panic — Unauthenticated Process Crash in github.com/russellhaering/gosaml2

概要

参考情報

• russellhaering/gosaml2 security advisory · ADVISORY

github.com/russellhaering/gosaml2 のその他の脆弱性

• GO-2026-4764Unsigned SAML LogoutRequest Acceptance in gosaml2 in github.com/russellhaering/gosaml2
• GHSA-pcgw-qcv5-h8ch高 7.5Unsigned SAML LogoutRequest Acceptance in gosaml2
• GHSA-hwqm-qvj9-4jr2高gosaml2 CBC Padding Panic — Unauthenticated Process Crash
• CVE-2023-26483中 5.3gosaml2 is a Pure Go implementation of SAML 2.0. SAML Service Providers using this library for SAML authentication support are likely suscep…
• GHSA-5684-g483-2249緊急Signature Validation Bypass