CVE-2024-45409

Published: Sep 10, 2024Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response/Assertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.

Affected (10)

Products: Onelogin: Ruby Saml · Omniauth: Omniauth Saml · Gitlab: Gitlab

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Onelogin Ruby Saml	Before 1.12.3
Onelogin Ruby Saml	From 1.13.0 to 1.17.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Omniauth Omniauth Saml	Up to 1.10.3
Omniauth Omniauth Saml	Version 2.0.0
Omniauth Omniauth Saml	Version 2.1.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 16.11.10
Gitlab Gitlab	From 17.0.0 to 17.0.8
Gitlab Gitlab	From 17.1.0 to 17.1.8
Gitlab Gitlab	From 17.2.0 to 17.2.7
Gitlab Gitlab	From 17.3.0 to 17.3.3