Threats tagged 'ghsa-wqp7-2ww4-q6mf'

XML::Sig versions before 0.71 for Perl contain a critical vulnerability that allows signature wrapping via duplicate ID values. The _get_signed_xml() function resolves SignedInfo Reference/@URI by selecting the first node with a matching ID, but does not detect if multiple elements share that ID. This can cause a document with duplicate IDs to verify successfully while an attacker controls the second element, potentially compromising SAML2 assertions.