Critical ruby-saml Vulnerabilities Allow Attackers to Bypass Authentication
Posted: Sun Mar 16, 2025 2:19 pm
A critical security vulnerability has been identified in the ruby-saml library, a popular tool used for Single Sign-On (SSO) via Security Assertion Markup Language (SAML) on the service provider side.
The vulnerabilities, designated as CVE-2025-25291 and CVE-2025-25292, allow attackers to bypass authentication and conduct account takeover attacks if they possess a valid signature created with the targeted organization’s key.
https://gbhackers.com/critical-ruby-sam ... abilities/
The vulnerabilities, designated as CVE-2025-25291 and CVE-2025-25292, allow attackers to bypass authentication and conduct account takeover attacks if they possess a valid signature created with the targeted organization’s key.
https://gbhackers.com/critical-ruby-sam ... abilities/