Timlegge Net::saml2 vulnerabilities
- timlegge net::saml2, net\ +1 more Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass via XML signature wrapping because new_from_xml reads assertion identity with document-wide XPath instead of the signed subtre… 8.1 High
- timlegge net::saml2, net\ +1 more Net::SAML2 versions before 0.86 for Perl allow authentication bypass because _verify_encrypted_assertion accepts an EncryptedAssertion whose decrypted content carries no signature 9.8 Critical
- timlegge net::saml2, net\ +1 more Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypass by verifying responses against the response-embedded certificate in verify_xml when no trust anchor is configured 7.5 High