Threats tagged 'ghsa-657v-xpf8-79x2'

Net::SAML2 versions before 0.86 for Perl contain a vulnerability that allows SAML authentication bypass via XML signature wrapping. The issue arises because the new_from_xml function reads identity fields using document-wide XPath expressions rather than restricting to the signed subtree, enabling attackers to inject unsigned assertions that appear valid. This flaw allows an attacker with a valid IdP-signed assertion to authenticate as any arbitrary user.