Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j9px-r24r-fm3p

Опубликовано: 05 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

EPSS

Процентиль: 33%
0.00132
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 9.8
ubuntu
3 месяца назад

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

CVSS3: 9.8
nvd
3 месяца назад

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

CVSS3: 9.8
debian
3 месяца назад

A type confusion vulnerability exists in the lasso_node_impl_init_from ...

rocky
3 месяца назад

Critical: lasso security update

rocky
3 месяца назад

Critical: lasso security update

EPSS

Процентиль: 33%
0.00132
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-843