GHSA-48rw-j489-928m

Source

https://github.com/advisories/GHSA-48rw-j489-928m

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2020/06/GHSA-48rw-j489-928m/GHSA-48rw-j489-928m.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-48rw-j489-928m

Aliases

CVE-2020-5407

Published

2020-06-05T16:13:29Z

Modified

2023-11-08T04:03:55.226562Z

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Signature wrapping vulnerability in Spring Security

Details

Spring Security versions 5.2.x prior to 5.2.4 and 5.3.x prior to 5.3.2 contain a signature wrapping vulnerability during SAML response validation. When using the spring-security-saml2-service-provider component, a malicious user can carefully modify an otherwise valid SAML response and append an arbitrary assertion that Spring Security will accept as valid.

Database specific

{
    "nvd_published_at": "2020-05-13T17:15:00Z",
    "github_reviewed_at": "2020-06-04T19:19:34Z",
    "severity": "HIGH",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-347"
    ]
}

References

Affected packages

Maven / org.springframework.security:spring-security-core

Package

Name: org.springframework.security:spring-security-core; View open source insights on deps.dev
Purl: pkg:maven/org.springframework.security/spring-security-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.2.0

Fixed

5.2.4

Affected versions

5.*

5.2.0.RELEASE

5.2.1.RELEASE

5.2.2.RELEASE

5.2.3.RELEASE

Maven / org.springframework.security:spring-security-core

Package

Name: org.springframework.security:spring-security-core; View open source insights on deps.dev
Purl: pkg:maven/org.springframework.security/spring-security-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

5.3.0

Fixed

5.3.2

Affected versions

5.*

5.3.0.RELEASE

5.3.1.RELEASE