Arbitrary file deletion through URL Injection to SAML SSO-URL Response

Advisory ID: LVD-2024-007

CVSSv 3.1 Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CVSSv 3.1 Base Score: 9.1

Severity: Critical

CVE: CVE-2024-36383

CWE: CWE-73

Date Published: 2024-05-27

Description:

The state parameter in the SAML SSO-URL response could be injected, causing arbitrary file deletion. Due to this, sometimes users could not log in using SAML Authentication.

Affected Product:

SAML Authentication v6.0.2

Solution:

Upgrade to SAML Authentication v6.0.3

Acknowledgments: -