Executive brief
ruby-saml vulnerable to XPath injection
Affected products
- RubyGems ruby-saml
Junglewise Threat Intelligence
CVE-2015-20108: ruby-saml vulnerable to XPath injection
CVE-2015-20108 · Severity: low · CVSS 3.1 · Published 2023-05-27
Vendors: RubyGems.
Related threats
- Ruby-saml allows a Libxml2 Canonicalization error to bypass Digest/Signature validation
- Ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)
- Ruby SAML DOS vulnerability with large SAML response
- Ruby-SAML Improper Authentication vulnerability
- OneLogin ruby-saml XML signature wrapping attack