VDB
BDU%3A2025-03642
BDU%3A2025-03642
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость протокола единого входа SAML SSO библиотеки Ruby SAML, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Ruby Team | Debian GNU/Linux, Ruby SAML, Omniauth SAML |
Timeline
- Apr 1, 2025 CVE Published
- Sep 26, 2025 CVE Updated
References
- https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials url
- https://github.com/SAML-Toolkits/ruby-saml/commit/e76c5b36bac40aedbf1ba7ffaaf495be63328cd9 url
- https://github.com/SAML-Toolkits/ruby-saml/commit/e9c1cdbd0f9afa467b585de279db0cbd0fb8ae97 url
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4 url
- https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0 url
- https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-754f-8gm6-c4r2 url
- https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv url
- https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349a advisory
- https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1 advisory
- https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq advisory
- https://security-tracker.debian.org/tracker/CVE-2025-25293 advisory