| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2024-32962 | XML signature verification bypass due improper verification of signature / signature spoofing | node-saml | xml-crypto | Critical | 10.0 | 2024-05-02 06:48:56 | Deep Dive |
| CVE-2023-48703 | SAML authentication bypass vulnerability in RobotsAndPencils/go-saml | RobotsAndPencils | go-saml | High | 7.5 | 2024-03-06 19:18:40 | Deep Dive |
| CVE-2023-45683 | Cross site scripting via missing binding syntax validation In ACS location in github.com/crewjam/saml | crewjam | saml | High | 7.1 | 2023-10-16 18:13:10 | Deep Dive |
| CVE-2023-40178 | @node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError | node-saml | node-saml | Medium | 5.3 | 2023-08-23 20:15:23 | Deep Dive |
| CVE-2023-37945 | Jenkins Plugin SAML Single Sign On(SSO) 安全漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 中危 | - | 2023-07-12 15:52:48 | Deep Dive |
| CVE-2023-29129 | Siemens Mendix SAML Module 授权问题漏洞 | Siemens | Mendix SAML (Mendix 7 compatible) | Critical | 9.1 | 2023-06-13 08:17:09 | Deep Dive |
| CVE-2023-32996 | Jenkins Plugin SAML Single Sign On(SSO) 安全漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 中危 | - | 2023-05-16 16:00:15 | Deep Dive |
| CVE-2023-32995 | Jenkins Plugin SAML Single Sign On(SSO) 跨站请求伪造漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 高危 | - | 2023-05-16 16:00:14 | Deep Dive |
| CVE-2023-32994 | Jenkins Plugin SAML Single Sign On(SSO) 信任管理问题漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 低危 | - | 2023-05-16 16:00:13 | Deep Dive |
| CVE-2023-32993 | Jenkins Plugin SAML Single Sign On(SSO) 数据伪造问题漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 中危 | - | 2023-05-16 16:00:12 | Deep Dive |
| CVE-2023-32992 | Jenkins Plugin SAML Single Sign On(SSO) 安全漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 高危 | - | 2023-05-16 16:00:12 | Deep Dive |
| CVE-2023-32991 | Jenkins Plugin SAML Single Sign On(SSO)跨站请求伪造漏洞 | Jenkins Project | Jenkins SAML Single Sign On(SSO) Plugin | 高危 | - | 2023-05-16 16:00:11 | Deep Dive |
| CVE-2023-28119 | crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb | crewjam | saml | High | 7.5 | 2023-03-22 19:51:13 | Deep Dive |
| CVE-2023-25957 | Siemens Mendix SAML Module 授权问题漏洞 | Siemens | Mendix SAML (Mendix 7 compatible) | Critical | 9.1 | 2023-03-14 09:31:56 | Deep Dive |
| CVE-2022-4496 | miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login | miniOrange | miniOrange WordPress SAML SSO Standard | 中危 | - | 2023-01-30 20:31:37 | Deep Dive |
| CVE-2022-39183 | Moodle Plugin - SAML Auth Open Redirect | Moodle Plugin - SAML Auth | Moodle Plugin - SAML Auth | Medium | 6.5 | 2023-01-12 00:00:00 | Deep Dive |
| CVE-2022-46823 | Siemens Mendix 跨站脚本漏洞 | Siemens | Mendix SAML (Mendix 8 compatible) | Critical | 9.3 | 2023-01-10 11:39:46 | Deep Dive |
| CVE-2020-36563 | Weak hash (SHA-1) in github.com/RobotsAndPencils/go-saml | github.com/RobotsAndPencils/go-saml | github.com/RobotsAndPencils/go-saml | 中危 | - | 2022-12-27 21:13:29 | Deep Dive |
| CVE-2022-41912 | crewjam/saml go library is vulnerable to signature bypass via multiple Assertion elements | crewjam | saml | Critical | 9.1 | 2022-11-28 00:00:00 | Deep Dive |
| CVE-2022-44457 | Siemens Mendix SAML Module 安全漏洞 | Siemens | Mendix SAML (Mendix 7 compatible) | 超危 | - | 2022-11-08 00:00:00 | Deep Dive |