CVE-2017-11429
1 advisory.
npm/saml2-js CVE-2017-11429: high 7.7, EPSS 2.74%
Authentication bypass via incorrect XML canonicalization and DOM traversal in saml2-js
Action: Upgrade saml2-js to 1.12.4 or later.
npm i saml2-js@1.12.4npm i saml2-js@2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.4 | - |
| 2.0.0 | 2.0.2 | - |
Fixed versions
| 1.12.4 | 2.0.2 |
Sources
- osv: GHSA-5p5w-j3g7-w4wv
- https://nvd.nist.gov/vuln/detail/CVE-2017-11429
- https://duo.com/blog/duo-finds-saml-vulnerabilities-affecting-multiple-implementations
- https://github.com/advisories/GHSA-5p5w-j3g7-w4wv
- https://www.kb.cert.org/vuls/id/475445
- https://www.npmjs.com/advisories/567
CVE-2017-11429 · published · modified · JSON