samlify SAML Signature Wrapping attack
Date: 2025-05
Affected: npm/samlify
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2025-47949
CWE: CWE-347

A Signature Wrapping attack has been found in samlify <v2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider.


Mitigations:

Architectural layers (MAESTRO):