Maven/com.linecorp.centraldogma:centraldogma-server-auth-saml: critical 9.1
SAML authentication bypass due to missing validation on unsigned SAML messages
Action: Upgrade com.linecorp.centraldogma:centraldogma-server-auth-saml to 0.64.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.64.3 | - |
Fixed versions
| 0.64.3 |
Sources
- osv: GHSA-hx5q-v6pj-533r
- https://github.com/line/armeria/security/advisories/GHSA-4m6j-23p2-8c54
- https://github.com/line/centraldogma/security/advisories/GHSA-hx5q-v6pj-533r
- https://github.com/line/centraldogma/commit/16903426be2e954c050b3ee47b8c38ee3218f0eb
- https://github.com/line/centraldogma/commit/16903426be2e954c050b3ee47b8c38ee3218f0ebxz
- https://github.com/line/centraldogma
- https://github.com/line/centraldogma/releases/tag/centraldogma-0.64.3
published · modified · JSON