ruby-saml vulnerable to XPath injection
Date: 2023-05
Affected: rubygems/ruby-saml
Attack vector: rce
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2015-20108
CWE: CWE-77
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

`xml_security.rb` in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.


Mitigations:

Architectural layers (MAESTRO):