New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2021-37154] Escape SAML request inResponseTo attribute. #130

Merged

pavelhoral merged 1 commit into WrenSecurity:main from orchitech:cve-2021-37154

Jun 30, 2023

Member

karelmaxa commented Jun 30, 2023

This PR introduces XML escaping of the SAML response attribute inResponseTo to resolve the security vulnerability published as a CVE-2021-37154.

I was able to reproduce the exploit using the current version built with JDK 17.


          Escape SAML request inResponseTo attribute.

ec4c564

karelmaxa requested a review from pavelhoral

June 30, 2023 11:08

karelmaxa changed the title ~~Escape SAML request inResponseTo attribute.~~ [CVE-2021-37154] Escape SAML request inResponseTo attribute.

pavelhoral approved these changes

View reviewed changes

Member

pavelhoral left a comment

LGTM

pavelhoral merged commit d5c02f4 into WrenSecurity:main

karelmaxa deleted the cve-2021-37154 branch

July 10, 2023 08:20

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet