Providing security resources for the Ruby community.
Follow us @rubysec or email us via info at

Advisory Archive


gem: ruby-saml
date: 2018-02-27
cve: 2017-11428
title: Authentication bypass via incorrect XML canonicalization and DOM traversal
description: |
  ruby-saml prior to version 1.7.0 is vulnerable to an authentication bypass via incorrect
  XML canonicalization and DOM traversal. Specifically, there are inconsistencies in
  handling of comments within XML nodes, resulting in incorrect parsing of the inner text
  of XML nodes such that any inner text after the comment is lost prior to
  cryptographically signing the SAML message. Text after the comment therefore has no
  impact on the signature on the SAML message.

  A remote attacker can modify SAML content for a SAML service provider without
  invalidating the cryptographic signature, which may allow attackers to bypass
  primary authentication for the affected SAML service provider.
cvss_v2: '6.3'
- ">= 1.7.0"
  url: '["",