Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-46705

Опубликовано: 05 нояб. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:entrouvert:lasso:2.5.1:*:*:*:*:*:*:*
cpe:2.3:a:entrouvert:lasso:2.8.2:*:*:*:*:*:*:*

EPSS

Процентиль: 23%
0.00076
Низкий

7.5 High

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 7.5
ubuntu
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

CVSS3: 7.5
debian
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached f ...

CVSS3: 9.6
github
3 месяца назад

A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

suse-cvrf
2 месяца назад

Security update for lasso

suse-cvrf
3 месяца назад

Security update for lasso

EPSS

Процентиль: 23%
0.00076
Низкий

7.5 High

CVSS3

Дефекты

CWE-617