Количество 2
Количество 2
CVE-2021-23365
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data).
GHSA-599h-8wpj-75xj
Authentication Bypass in tyk-identity-broker
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-23365 The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data). | CVSS3: 4.8 | 0% Низкий | почти 5 лет назад |
| GHSA-599h-8wpj-75xj Authentication Bypass in tyk-identity-broker | CVSS3: 9.1 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу