Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5xc3-hrwr-2p8h

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

EPSS

Процентиль: 48%
0.00246
Низкий

Дефекты

CWE-345

Связанные уязвимости

CVSS3: 8.8
nvd
больше 4 лет назад

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

EPSS

Процентиль: 48%
0.00246
Низкий

Дефекты

CWE-345