npm/passport-wsfed-saml2 CVE-2022-23505: medium 5.3, EPSS 0.80%
Authentication Bypass for passport-wsfed-saml2
Action: Upgrade passport-wsfed-saml2 to 4.6.3 or later.
npm i passport-wsfed-saml2@4.6.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.6.3 | - |
Fixed versions
| 4.6.3 |
Sources
- osv: GHSA-ppjq-qxhx-m25f
- https://github.com/auth0/passport-wsfed-saml2/security/advisories/GHSA-ppjq-qxhx-m25f
- https://nvd.nist.gov/vuln/detail/CVE-2022-23505
- https://github.com/auth0/passport-wsfed-saml2/pull/179
- https://github.com/auth0/passport-wsfed-saml2
CVE-2022-23505 · published · modified · JSON