cvedb.io
CVE-2025-25292
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2025-03-12T21:15:42.177 · Last modified 2026-06-17T09:00:37.750

Summary

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.

Affected products

omniauth — omniauth_saml

Does this affect you?

Add your gear to cvedb and we'll alert you only when omniauth ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.