Fusionauth

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Fusionauth records in CISA KEV

No Fusionauth vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Fusionauth 2 records MEDIUM Saml V2 1 record LOW Samlv2 1 record MEDIUM

Records

1 record in Samlv2 · all components

TI-2020-10080 CVE-2020-12676 · GHSA-qh45-328h-49g4

FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass…

MEDIUM 45

FusionAuth fusionauth-samlv2 0.2.3 allows remote attackers to forge messages and bypass authentication via a SAML assertion that lacks a Signature element, aka a "Signature exclusion attack".

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0293 Published 2020-10-02 No fix listed CWE-347

Open these records in search →

Critical	1
High	2
Medium	1
Low	0
No CVSS	0