Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pmj8-xcc6-hfrp

Опубликовано: 05 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.6

Описание

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

EPSS

Процентиль: 23%
0.00076
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

CVSS3: 7.5
nvd
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

CVSS3: 7.5
debian
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached f ...

suse-cvrf
2 месяца назад

Security update for lasso

suse-cvrf
3 месяца назад

Security update for lasso

EPSS

Процентиль: 23%
0.00076
Низкий

9.6 Critical

CVSS3

Дефекты

CWE-617