An XML Signature Wrapping vulnerability exists in Samlify 2.2.0 and earlier, and in predecessor Express-saml2 which could allow attackers to impersonate arbitrary users.
Published at: January 02, 2018 at 05:29PM
View on website
New vulnerability on the NVD: CVE-2017-1000452
Tag: government hack NVD security
No comments: