Threats tagged 'ghsa-j9px-r24r-fm3p'

CVE-2025-47151 is a critical type confusion vulnerability in the lasso_node_impl_init_from_xml function of Entr'ouvert Lasso versions 2.5.1 and 2.8.2. It can be triggered by sending a specially crafted SAML response, potentially leading to arbitrary code execution. This vulnerability requires no privileges and can be exploited remotely with user interaction.