Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2025-25292

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.

CVSS v3:

  • Severity: Critical
  • Score: 9.8
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
Ruby icon ruby-saml 1.13.0 1.18.0
Ruby icon ruby-saml - 1.12.4
omniauth / omniauth_saml - 1.10.6
onelogin / ruby-saml - 1.12.4
onelogin / ruby-saml 1.13.0 1.18.0
omniauth / omniauth_saml 2.0.0 2.1.3
omniauth / omniauth_saml 2.2.0 2.2.3