Ruby-Saml Gem is vulnerable to XPath Injection
Published: April 29, 2015
SECURITY IDENTIFIERS
- OSVDB: OSVDB-124991
- Vendor Advisory: https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.0.0
GEM
SEVERITY
CVSS v2.0: 6.7 (Medium)
PATCHED VERSIONS
>= 1.0.0
DESCRIPTION
ruby-saml before 1.0.0 is vulnerable to XPath injection on xml_security.rb. The lack of prepared statements allows for possibly command injection, leading to arbitrary code execution.