node saml project records

3 published records for vendor node saml project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2024-32962Proof of concept	XML signature verification bypass due improper verification of signature / signature spoofingnode-saml · xml-crypto · CWE-347 Pre-auth Weak crypto	Critical10.0	—	0.8%	May 2, 2024
32Monitor	CVE-2022-39300No exploit	Signature bypass via multiple root elements in node-SAMLnode saml project · node saml · CWE-347 Pre-auth Weak crypto	High8.1	—	0.7%	Oct 13, 2022
21Monitor	CVE-2023-40178No exploit	@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityErrornode saml project · node saml · CWE-347 Pre-auth Weak crypto Denial of service	Medium5.3	—	0.5%	Aug 23, 2023

CVE-2024-32962
40Plan
XML signature verification bypass due improper verification of signature / signature spoofing
CriticalCVSS 10.0Proof of conceptEPSS 1%
- Pre-auth
- Weak crypto
node-saml · xml-cryptoMay 2, 2024
CVE-2022-39300
32Monitor
Signature bypass via multiple root elements in node-SAML
HighCVSS 8.1No exploitEPSS 1%
- Pre-auth
- Weak crypto
node saml project · node samlOct 13, 2022
CVE-2023-40178
21Monitor
@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
MediumCVSS 5.3No exploitEPSS 0%
node saml project · node samlAug 23, 2023