CVE-2025-31335

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter...

4.0 MediumFix available

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: None

Exploit likelihood

0.25%Up 0.2 points since Mar 28, 2025

What each source reports

CVE List Score used 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: CVE-2025-31335
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness: CWE-347
Updated: 2026-11-02

EUVDEUVD-2025-14769 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: EUVD-2025-14769
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-8f4c-9gmv-rfm8 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter...

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: GHSA-8f4c-9gmv-rfm8
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness: CWE-347
Updated: 2026-11-02

NVD 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: CVE-2025-31335
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness: CWE-347
Updated: 2026-11-02

OSVDEBIAN-CVE-2025-31335 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: DEBIAN-CVE-2025-31335
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2025-31335 4.0

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: UBUNTU-CVE-2025-31335
CVSS 3.1: 4.0 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Updated: 2026-11-02

Show 5 moreShow less

OSV No score

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Record: CVE-2025-31335
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14959-1 No score

libsaml-devel-3.3.1-2.1 on GA media

These are all security issues fixed in the libsaml-devel-3.3.1-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14959-1
Updated: 2026-11-02

OSVSUSE-SU-2025:01500-1 No score

Security update for opensaml

This update for opensaml fixes the following issues:

CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. (bsc#1239889)

Record: SUSE-SU-2025:01500-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1500-1 No score

Security update for opensaml

This update for opensaml fixes the following issues:

CVE-2025-31335: Fixed a bug where parameter manipulation allows the forging of signed SAML messages. (bsc#1239889)

Record: SUSE-SU-2025:1500-1
Updated: 2026-11-02

OSVSUSE-SU-2025:1501-1 No score

Security update for opensaml

This update for opensaml fixes the following issues:

CVE-2025-31335: Fixed parameter manipulation allowing forging signed SAML messages (bsc#1239889)

Record: SUSE-SU-2025:1501-1
Updated: 2026-11-02

Affected products

shibboleth opensaml c++ library

Affected packages

Affected packages
Package	Affected	Fixed
`opensaml` Debian:12	before 3.2.1-3+deb12u1, plus listed versions 3.2.1-3	3.2.1-3+deb12u1
`opensaml` Debian:13	before 3.3.1-1	3.3.1-1
`opensaml` Debian:14	before 3.3.1-1	3.3.1-1
`opensaml` Debian:11	before 3.2.0-2+deb11u1, plus listed versions 3.2.0-2	3.2.0-2+deb11u1
`opensaml` SUSE:Linux Enterprise Module for Server Applications 15 SP7	before 3.1.0-150300.3.3.1	3.1.0-150300.3.3.1
`opensaml` SUSE:Linux Enterprise Module for Server Applications 15 SP6	before 3.1.0-150300.3.3.1	3.1.0-150300.3.3.1
`opensaml` openSUSE:Leap 15.6	before 3.1.0-150300.3.3.1	3.1.0-150300.3.3.1
`opensaml` SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5	before 2.5.5-3.6.1	2.5.5-3.6.1
`opensaml2` Ubuntu:Pro:16.04:LTS	before 2.5.5-1ubuntu0.1+esm1, plus listed versions 2.5.3-2.1ubuntu22.5.5-12.5.5-1ubuntu0.1	2.5.5-1ubuntu0.1+esm1
`opensaml2` Ubuntu:Pro:18.04:LTS	before 2.6.1-1ubuntu0.1~esm1, plus listed versions 2.6.0-42.6.0-52.6.0-5build12.6.1-1	2.6.1-1ubuntu0.1~esm1

Show 4 moreShow less

Affected packages
Package	Affected	Fixed
`opensaml` Ubuntu:20.04:LTS	before 3.0.1-1ubuntu0.1, plus listed versions 3.0.1-13.0.1-1build1	3.0.1-1ubuntu0.1
`opensaml` Ubuntu:22.04:LTS	before 3.2.1-1ubuntu0.1, plus listed versions 3.2.0-2ubuntu13.2.1-1	3.2.1-1ubuntu0.1
`opensaml` Ubuntu:24.04:LTS	before 3.2.1-4.1ubuntu0.24.04.1, plus listed versions 3.2.1-33.2.1-43.2.1-4.1build13.2.1-4.1build2	3.2.1-4.1ubuntu0.24.04.1
`opensaml` openSUSE:Tumbleweed	before 3.3.1-2.1	3.3.1-2.1

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-31335 is a medium vulnerability (CVSS 4.0) in Shibboleth Opensaml C++ Library, published March 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in opensaml 3.2.1-3+deb12u1.

References

Show 10 moreShow less