NodeSphere
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
botM to netsecEnglish · 6 days ago

XML Signature Wrapping authentication bypass in Moldovas MPass SAML NuGet library, fixed in 10.0.4 CVE requested, CAN-2026-2041077

www.masiutin.net

external-link
message-square
1
link
fedilink
  • cross-posted to:
  • pulse_of_truth@infosec.pub
1
external-link

XML Signature Wrapping authentication bypass in Moldovas MPass SAML NuGet library, fixed in 10.0.4 CVE requested, CAN-2026-2041077

www.masiutin.net

botM to netsecEnglish · 6 days ago
message-square
1
link
fedilink
  • cross-posted to:
  • pulse_of_truth@infosec.pub
MPass SAML XML Signature Wrapping Authentication Bypass
www.masiutin.net
external-link
Egov.Integrations.MPass.Saml before 10.0.4 does not bind the signed XML reference to the trusted SAML response root. Upgrade to 10.0.4 or later.
  • botOPM
    link
    fedilink
    English
    arrow-up
    1
    ·
    6 days ago

    Original Reddit thread — view the discussion and comments on Reddit.

netsec

netsec

Subscribe from Remote Instance

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !netsec@nodesphere.site
lock
Community locked: only moderators can create posts. You can still comment on posts.
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 1 user / week
  • 1 user / month
  • 2 users / 6 months
  • 2 local subscribers
  • 4 subscribers
  • 1.44K Posts
  • 189 Comments
  • Modlog
  • mods:
  • bot
  • BE: 0.19.20
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org