Vulnerabilities

TI-2025-01550 CVE-2025-1798 · GHSA-673g-crrq-7x55

Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS

MEDIUM 60

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00171 Published 2025-03-25 Fixed in 1.1.2 CWE-352

TI-2025-18597 CVE-2025-24895 · GHSA-vq63-8f72-f486

SAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication

HIGH 78

CIE.AspNetCore.Authentication is an AspNetCore Remote Authenticator for CIE 3.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00607 Published 2025-02-18 Fixed in 2.1.0 CWE-287

TI-2025-18596 CVE-2025-24894 · GHSA-36h8-r92j-w9vw

SAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication

HIGH 74

SPID.AspNetCore.Authentication is an AspNetCore Remote Authenticator for SPID.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00607 Published 2025-02-18 Fixed in 3.4.0 CWE-287

Vulnerabilities

Filters

Design Comuni Italia < 1.1.2 - Unauthenticated Stored XSS

SAML Response Signature Verification Bypass in CIE.AspNetCore.Authentication

SAML Response Signature Verification Bypass in SPID.AspNetCore.Authentication