CVE-2023-5309 (published 2023-11-07T19:01:05.041Z)
Versions of Puppet Enterprise prior to 2021.7.6 and 2023.5 contain a flaw which results in broken session management for SAML implementations. 

Affected products: Vendor: Puppet
Product: Puppet Enterprise
Versions: 2021.7.0, 2023.0.0