Saml2 vulnerabilities

1 known vulnerability in Saml2 from Sustainsys. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Saml2: Authentication Bypass by Alternate Name

  CVE-2023-41890Sep 19, 2023Sustainsys

  Sustainsys.Saml2 library adds SAML2P support to ASP.NET web sites, allowing the web site to act as a SAML2 Service Provider. Prior to versions 1.0.3 and 2.9.2, when a response is processed, the issuer of the Identity Provider is not sufficiently validated. Thi