CVE-2025-25291
CRITICALDescription
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| omniauth | omniauth_saml |
| omniauth | omniauth_saml |
| omniauth | omniauth_saml |
| onelogin | ruby-saml |
| onelogin | ruby-saml |
| netapp | storagegrid |
References
Advisories & Patches
Exploits
Other References
Frequently Asked Questions
What is CVE-2025-25291? +
How severe is CVE-2025-25291? +
What products are affected by CVE-2025-25291? +
How do I check if I'm vulnerable to CVE-2025-25291? +
Related Vulnerabilities
Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed …
aes-gcm is a pure Rust implementation of the AES-GCM. In decrypt_in_place_detached, the decrypted ciphertext (which is the correct ciphertext) is …
Improper verification of the digital signature in ksojscore.dll in Kingsoft WPS Office in versions equal or less than 12.1.0.18276 on …
xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability …
xml-crypto is an XML digital signature and encryption library for Node.js. An attacker may be able to exploit a vulnerability …
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the …