Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-45392 State: PUBLISHED Published: 2024-09-05T16:34:14.271Z Last Updated: 2024-09-05T17:43:20.061Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N) Vendors: salesagility Products: SuiteCRM Problem Types: CWE-284 Description: SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Versions 7.14.5 and 8.6.2 contain a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-8qfx-h7pm-2587 - https://docs.suitecrm.com/admin/rele
https://github.com/salesagility/SuiteCRM/security/advisories/GHSA-8qfx-h7pm-2587 - https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_5
CVE ID: CVE-2024-45393 State: PUBLISHED Published: 2024-09-10T15:04:13.556Z Last Updated: 2024-09-10T19:25:11.113Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: cvat-ai Products: cvat Problem Types: CWE-862 Description: Computer Vision Annotation Tool (CVAT) is an interactive video and image annotation tool for computer vision. An attacker with a CVAT account can access webhook delivery information for any webhook registered on the CVAT instance, including that of other users. For each delivery, this contains information about the event that caused the delivery, typically including full details about the object on which an action was performed (such as the
hat caused the delivery, typically including full details about the object on which an action was performed (such as the task for an "update:task" event), and the user who performed the action. In addition, the attacker can redeliver any past delivery of any webhook, and trigger a ping event for any webhook. Upgrade to CVAT 2.18.0 or any later version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cvat-ai/cvat/security/advisories/GHSA-p3c9-m7jr-jxxj - https://github.com/cvat-ai/cvat/commit/0fafb797fdf022fb83ce81c6405ba19b583a236f
CVE ID: CVE-2024-45394 State: PUBLISHED Published: 2024-09-03T20:15:42.769Z Last Updated: 2024-10-09T14:27:06.537Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Authenticator-Extension Products: Authenticator Problem Types: CWE-261, CWE-327 Description: Authenticator is a browser extension that generates two-step verification codes. In versions 7.0.0 and below, encryption keys for user data were stored encrypted at-rest using only AES-256 and the EVP_BytesToKey KDF. Therefore, attackers with a copy of a user's data are able to brute-force the user's encryption key. Users on version 8.0.0 and above are automatically migrated away from the weak encoding on fir
he user's encryption key. Users on version 8.0.0 and above are automatically migrated away from the weak encoding on first login. Users should destroy encrypted backups made with versions prior to 8.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Authenticator-Extension/Authenticator/security/advisories/GHSA-gv8m-vgp8-q2xr - https://github.com/Authenticator-Extension/Authenticator/commit/17aa2068553db3c3aac081c9ffe393536f33b28b
CVE ID: CVE-2024-45395 State: PUBLISHED Published: 2024-09-04T20:15:08.769Z Last Updated: 2024-09-05T14:25:27.922Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: sigstore Products: sigstore-go Problem Types: CWE-835 Description: sigstore-go, a Go library for Sigstore signing and verification, is susceptible to a denial of service attack in versions prior to 0.6.1 when a verifier is provided a maliciously crafted Sigstore Bundle containing large amounts of verifiable data, in the form of signed transparency log entries, RFC 3161 timestamps, and attestation subjects. The verification of these data structures is computationally expensive. This can be used to cons
d attestation subjects. The verification of these data structures is computationally expensive. This can be used to consume excessive CPU resources, leading to a denial of service attack. TUF's security model labels this type of vulnerability an "Endless data attack," and can lead to verification failing to complete and disrupting services that rely on sigstore-go for verification. This vulnerability is addressed with sigstore-go 0.6.1, which adds hard limits to the number of verifiable data structures that can be processed in a bundle. Verification will fail if a bundle has data that exceeds these limits. The limits are 32 signed transparency log entries, 32 RFC 3161 timestamps, 1024 attest
s data that exceeds these limits. The limits are 32 signed transparency log entries, 32 RFC 3161 timestamps, 1024 attestation subjects, and 32 digests per attestation subject. These limits are intended to be high enough to accommodate the vast majority of use cases, while preventing the verification of maliciously crafted bundles that contain large amounts of verifiable data. Users who are vulnerable but unable to quickly upgrade may consider adding manual bundle validation to enforce limits similar to those in the referenced patch prior to calling sigstore-go's verification functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sigstore/sigstore-go/se
n functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/sigstore/sigstore-go/security/advisories/GHSA-cq38-jh5f-37mq - https://github.com/sigstore/sigstore-go/commit/01e70e89e58226286d7977b4dba43b6be472b12c - https://github.com/sigstore/sigstore-go/blob/725e508ed4933e6f5b5206e32af4bbe76f587b54/pkg/verify/signature.go#L183-L193 - https://github.com/sigstore/sigstore-go/blob/725e508ed4933e6f5b5206e32af4bbe76f587b54/pkg/verify/tlog.go#L74-L178 - https://github.com/sigstore/sigstore-go/blob/725e508ed4933e6f5b5206e32af4bbe76f587b54/pkg/verify/tsa.go#L59-L68
CVE ID: CVE-2024-45396 State: PUBLISHED Published: 2024-10-11T14:36:38.172Z Last Updated: 2024-10-15T16:11:05.956Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: h2o Products: quicly Problem Types: CWE-617 Description: Quicly is an IETF QUIC protocol implementation. Quicly up to commtit d720707 is susceptible to a denial-of-service attack. A remote attacker can exploit these bugs to trigger an assertion failure that crashes process using quicly. The vulnerability is addressed with commit 2a95896104901589c495bc41460262e64ffcad5c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h2o/quicly/security/advisories/GHSA-mp3c-h5gg-mm
nalyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h2o/quicly/security/advisories/GHSA-mp3c-h5gg-mm6p - https://github.com/h2o/quicly/commit/2a95896104901589c495bc41460262e64ffcad5c
CVE ID: CVE-2024-45397 State: PUBLISHED Published: 2024-10-11T14:24:57.687Z Last Updated: 2024-10-11T14:42:24.963Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: h2o Products: h2o Problem Types: CWE-284 Description: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When an HTTP request using TLS/1.3 early data on top of TCP Fast Open or QUIC 0-RTT packets is received and the IP-address-based access control is used, the access control does not detect and prohibit HTTP requests conveyed by packets with a spoofed source address. This behavior allows attackers on the network to execute HTTP requests from addresses that are otherwise rejected b
ess. This behavior allows attackers on the network to execute HTTP requests from addresses that are otherwise rejected by the address-based access control. The vulnerability has been addressed in commit 15ed15a. Users may disable the use of TCP FastOpen and QUIC to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h2o/h2o/security/advisories/GHSA-jf2c-xjcp-wg4c - https://github.com/h2o/h2o/commit/15ed15a2efb83a77bb4baaa5a119e639c2f6898a - https://h2o.examp1e.net/configure/http3_directives.html
CVE ID: CVE-2024-45398 State: PUBLISHED Published: 2024-09-17T19:56:00.791Z Last Updated: 2024-09-18T13:17:36.013Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: contao Products: contao Problem Types: CWE-434 Description: Contao is an Open Source CMS. In affected versions a back end user with access to the file manager can upload malicious files and execute them on the server. Users are advised to update to Contao 4.13.49, 5.3.15 or 5.4.3. Users unable to update are advised to configure their web server so it does not execute PHP files and other scripts in the Contao file upload directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
ther scripts in the Contao file upload directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/contao/contao/security/advisories/GHSA-vm6r-j788-hjh5 - https://contao.org/en/security-advisories/remote-command-execution-through-file-uploads
CVE ID: CVE-2024-45399 State: PUBLISHED Published: 2024-09-04T20:12:20.457Z Last Updated: 2024-09-04T20:17:38.298Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: indico Products: indico Problem Types: CWE-79, CWE-1395 Description: Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. In Indico prior to version 3.3.4, corresponding to Flask-Multipass prior to version 0.5.5, there is a Cross-Site-Scripting vulnerability during account creation when redirecting to the `next` URL. Exploitation requires initiating the account creation process with a maliciously crafted link, and then finalizing the signu
oitation requires initiating the account creation process with a maliciously crafted link, and then finalizing the signup process. Because of this, it can only target newly created (and thus unprivileged) Indico users. Indico 3.3.4 upgrades the dependency on Flask-Multipass to version 0.5.5, which fixes the issue. Those who build the Indico package themselves and cannot upgrade can update the `flask-multipass` dependency to `>=0.5.5` which fixes the vulnerability. Otherwise one could configure one's web server to disallow requests containing a query string with a `next` parameter that starts with `javascript:`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.c
ameter that starts with `javascript:`. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/indico/indico/security/advisories/GHSA-rrqf-w74j-24ff - https://github.com/indico/flask-multipass/commit/0bdcf656d469e5f675cb56fd644d82fea3a97c2a - https://github.com/indico/indico/commit/7dcb573837b9fd09d95f74d1baeae225b164cc8f - https://github.com/indico/indico/releases/tag/v3.3.4
CVE ID: CVE-2024-45400 State: PUBLISHED Published: 2024-09-05T23:23:32.908Z Last Updated: 2024-09-06T13:25:02.194Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: mlewand Products: ckeditor-plugin-openlink Problem Types: CWE-79 Description: ckeditor-plugin-openlink is a plugin for the CKEditor JavaScript text editor that extends the context menu with a possibility to open a link in a new tab. A vulnerability in versions of the plugin prior to 1.0.7 allowed a user to execute JavaScript code by abusing the link href attribute. The fix is available starting with version 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/m
lable starting with version 1.0.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mlewand/ckeditor-plugin-openlink/security/advisories/GHSA-qj47-6x6q-m3c9 - https://github.com/mlewand/ckeditor-plugin-openlink/commit/402391fdd4d9cfd079031372f9caebbf54993ffb
CVE ID: CVE-2024-45401 State: PUBLISHED Published: 2024-09-05T17:09:08.933Z Last Updated: 2024-12-19T21:21:42.735Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: stripe Products: stripe-cli Problem Types: CWE-22 Description: stripe-cli is a command-line tool for the payment processor Stripe. A vulnerability exists in stripe-cli starting in version 1.11.1 and prior to version 1.21.3 where a plugin package containing a manifest with a malformed plugin shortname installed using the --archive-url or --archive-path flags can overwrite arbitrary files. The update in version 1.21.3 addresses the path traversal vulnerability by removing the ability to install plugins
iles. The update in version 1.21.3 addresses the path traversal vulnerability by removing the ability to install plugins from an archive URL or path. There has been no evidence of exploitation of this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/stripe/stripe-cli/security/advisories/GHSA-fv4g-gwpj-74gr
CVE ID: CVE-2024-45402 State: PUBLISHED Published: 2024-10-11T14:38:59.695Z Last Updated: 2024-10-15T16:11:10.181Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: h2o Products: picotls Problem Types: CWE-415 Description: Picotls is a TLS protocol library that allows users select different crypto backends based on their use case. When parsing a spoofed TLS handshake message, picotls (specifically, bindings within picotls that call the crypto libraries) may attempt to free the same memory twice. This double free occurs during the disposal of multiple objects without any intervening calls to malloc Typically, this triggers the malloc implementation to detect the
ltiple objects without any intervening calls to malloc Typically, this triggers the malloc implementation to detect the error and abort the process. However, depending on the internals of malloc and the crypto backend being used, the flaw could potentially lead to a use-after-free scenario, which might allow for arbitrary code execution. The vulnerability is addressed with commit 9b88159ce763d680e4a13b6e8f3171ae923a535d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h2o/picotls/security/advisories/GHSA-w7c8-wjx9-vvvv - https://github.com/h2o/picotls/commit/9b88159ce763d680e4a13b6e8f3171ae923a535d
CVE ID: CVE-2024-45403 State: PUBLISHED Published: 2024-10-11T14:28:35.262Z Last Updated: 2024-10-11T14:40:53.132Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: h2o Products: h2o Problem Types: CWE-617 Description: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. When h2o is configured as a reverse proxy and HTTP/3 requests are cancelled by the client, h2o might crash due to an assertion failure. The crash can be exploited by an attacker to mount a Denial-of-Service attack. By default, the h2o standalone server automatically restarts, minimizing the impact. However, HTTP requests that were served concurrently will still be disrupted. The vu
ly restarts, minimizing the impact. However, HTTP requests that were served concurrently will still be disrupted. The vulnerability has been addressed in commit 1ed32b2. Users may disable the use of HTTP/3 to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/h2o/h2o/security/advisories/GHSA-4xp5-3jhc-3m92 - https://github.com/h2o/h2o/commit/16b13eee8ad7895b4fe3fcbcabee53bd52782562 - https://github.com/h2o/h2o/commit/1ed32b23f999acf0c5029f09c8525f93eb1d354c - https://h2o.examp1e.net/configure/http3_directives.html
CVE ID: CVE-2024-45404 State: PUBLISHED Published: 2024-12-11T22:01:46.667Z Last Updated: 2024-12-12T16:36:11.908Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: OpenCTI-Platform Products: opencti Problem Types: CWE-287 Description: OpenCTI is an open-source cyber threat intelligence platform. In versions below 6.2.18, because the function to limit the rate of OTP does not exist, an attacker with valid credentials or a malicious user who commits internal fraud can break through the two-factor authentication and hijack the account. This is because the otpLogin mutation does not implement One Time Password rate limiting. As of time of publication, it is unknown
cause the otpLogin mutation does not implement One Time Password rate limiting. As of time of publication, it is unknown whether a patch is available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-hg56-r6hh-56j7
CVE ID: CVE-2024-45405 State: PUBLISHED Published: 2024-09-06T13:10:31.602Z Last Updated: 2024-09-06T14:10:03.214Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: Byron Products: gitoxide Problem Types: CWE-41, CWE-427 Description: `gix-path` is a crate of the `gitoxide` project (an implementation of `git` written in Rust) dealing paths and their conversions. Prior to version 0.10.11, `gix-path` runs `git` to find the path of a configuration file associated with the `git` installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Version 0.10
SCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Version 0.10.11 contains a patch for the issue. In `gix_path::env`, the underlying implementation of the `installation_config` and `installation_config_prefix` functions calls `git config -l --show-origin` to find the path of a file to treat as belonging to the `git` installation. Affected versions of `gix-path` do not pass `-z`/`--null` to cause `git` to report literal paths. Instead, to cover the occasional case that `git` outputs a quoted path, they attempt to parse the path by stripping the quotation marks. The problem is that, when a path is quoted, it may change in substantial wa
e the path by stripping the quotation marks. The problem is that, when a path is quoted, it may change in substantial ways beyond the concatenation of quotation marks. If not reversed, these changes can result in another valid path that is not equivalent to the original. On a single-user system, it is not possible to exploit this, unless `GIT_CONFIG_SYSTEM` and `GIT_CONFIG_GLOBAL` have been set to unusual values or Git has been installed in an unusual way. Such a scenario is not expected. Exploitation is unlikely even on a multi-user system, though it is plausible in some uncommon configurations or use cases. In general, exploitation is more likely to succeed if users are expected to install
ncommon configurations or use cases. In general, exploitation is more likely to succeed if users are expected to install `git` themselves, and are likely to do so in predictable locations; locations where `git` is installed, whether due to usernames in their paths or otherwise, contain characters that `git` quotes by default in paths, such as non-English letters and accented letters; a custom `system`-scope configuration file is specified with the `GIT_CONFIG_SYSTEM` environment variable, and its path is in an unusual location or has strangely named components; or a `system`-scope configuration file is absent, empty, or suppressed by means other than `GIT_CONFIG_NOSYSTEM`. Currently, `gix-pa
`-scope configuration file is absent, empty, or suppressed by means other than `GIT_CONFIG_NOSYSTEM`. Currently, `gix-path` can treat a `global`-scope configuration file as belonging to the installation if no higher scope configuration file is available. This increases the likelihood of exploitation even on a system where `git` is installed system-wide in an ordinary way. However, exploitation is expected to be very difficult even under any combination of those factors. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Byron/gitoxide/security/advisories/GHSA-m8rp-vv92-46c7 - https://github.com/Byron/gitoxide/commit/650a1b5cf25e086197cc55a68525a411e1c28031 -
ty/advisories/GHSA-m8rp-vv92-46c7 - https://github.com/Byron/gitoxide/commit/650a1b5cf25e086197cc55a68525a411e1c28031 - https://github.com/Byron/gitoxide/blob/1cfe577d461293879e91538dbc4bbfe01722e1e8/gix-path/src/env/git/mod.rs#L138-L142
CVE ID: CVE-2024-45406 State: PUBLISHED Published: 2024-09-09T16:46:26.948Z Last Updated: 2024-09-09T19:59:08.697Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: craftcms Products: cms Problem Types: CWE-80, CWE-79 Description: Craft is a content management system (CMS). Craft CMS 5 stored XSS can be triggered by the breadcrumb list and title fields with user input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/craftcms/cms/security/advisories/GHSA-28h4-788g-rh42 - https://github.com/craftcms/cms/commit/b7348942f8131b3868ec6f46d615baae50151bb8
CVE ID: CVE-2024-45407 State: PUBLISHED Published: 2024-09-10T15:13:20.126Z Last Updated: 2024-09-10T16:12:18.563Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: LizardByte Products: Sunshine Problem Types: CWE-300 Description: Sunshine is a self-hosted game stream host for Moonlight. Clients that experience a MITM attack during the pairing process may inadvertantly allow access to an unintended client rather than failing authentication due to a PIN validation error. The pairing attempt fails due to the incorrect PIN, but the certificate from the forged pairing attempt is incorrectly persisted prior to the completion of the pairing request. This allows acce
rom the forged pairing attempt is incorrectly persisted prior to the completion of the pairing request. This allows access to the certificate belonging to the attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LizardByte/Sunshine/security/advisories/GHSA-jqph-8cp5-g874 - https://github.com/LizardByte/Sunshine/commit/5fcd07ecb1428bfe245ad6fa349aead476c7e772 - https://github.com/LizardByte/Sunshine/commit/fd7e68457a134102d1b30af5796c79f2aa623224
CVE ID: CVE-2024-45408 State: PUBLISHED Published: 2024-10-01T14:53:48.085Z Last Updated: 2024-10-01T15:12:46.615Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: elabftw Products: elabftw Problem Types: CWE-284 Description: eLabFTW is an open source electronic lab notebook for research labs. An incorrect permission check has been found that could allow an authenticated user to access several kinds of otherwise restricted information. If anonymous access is allowed (something disabled by default), this extends to anyone. Users are advised to upgrade to at least version 5.1.0. System administrators can disable anonymous access in the System configuration panel.
upgrade to at least version 5.1.0. System administrators can disable anonymous access in the System configuration panel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/elabftw/elabftw/security/advisories/GHSA-2c83-6j74-w8r5
CVE ID: CVE-2024-45409 State: PUBLISHED Published: 2024-09-10T18:50:12.965Z Last Updated: 2024-11-11T17:02:31.329Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N) Vendors: SAML-Toolkits Products: ruby-saml Problem Types: CWE-347 Description: The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulner
arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2 - https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-cvp8-5r8g-fhvq - https://github.com/SAML-Toolkits/ruby-saml/commit/1ec5392bc506fe43a02dbb66b68741051c5ffeae - https://github.com/SAML-Toolkits/ruby-saml/commit/4865d030cae9705ee5cdb12415c654c634093ae7