TI-2021-04341 CVE-2021-21238 · GHSA-f4g9-h89h-jgv9
SAML XML Signature wrapping
Priority LOW 31
PySAML2 is a pure python implementation of SAML Version 2 Standard.
Vulnerabilities
7 records
TI-2021-04342 CVE-2021-21239 · GHSA-5p3x-r448-pc62
Open default xmlsec1 key-type preference
Priority LOW 31
PySAML2 is a pure python implementation of SAML Version 2 Standard.
TI-2020-04437 CVE-2020-5390 · GHSA-qf7v-8hj3-4xw7
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped…
Priority LOW 35
PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW).
TI-2017-14652 CVE-2017-1000433 · GHSA-924m-4pmx-c67h
pysaml2 version 4.4.0 and older accept any password when run with python optimizations…
Priority MEDIUM 40
pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled.
TI-2017-14561 CVE-2017-1000246 · GHSA-cq94-qf6q-mf2h
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across…
Priority LOW 26
Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak encryption of data.
TI-2016-08225 CVE-2016-10149 · GHSA-c2vx-49jm-h3f6
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote…
Priority MEDIUM 41
XML External Entity (XXE) vulnerability in PySAML2 4.4.0 and earlier allows remote attackers to read arbitrary files via a crafted SAML XML request or response.
TI-2016-08203 CVE-2016-10127 · GHSA-m269-wj6g-c459
PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.
Priority MEDIUM 44
PySAML2 allows remote attackers to conduct XML external entity (XXE) attacks via a crafted SAML XML request or response.