⌘ + K

GHSA-4xx7-2cx3-x473

Dashboard / Vulnerabilities / GHSA-4xx7-2cx3-x473

GHSA-4xx7-2cx3-x473

Published: 19 Sept 2024Last Modified: 10 Sept 2026

Summary: Duplicate Advisory: Keycloak SAML signature validation flaw

Details: # Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-xgfv-xpx8-qhcr. This link is maintained to preserve external references. # Original Description A flaw exists in the SAML signature validation method within the Keycloak XMLSignatureUtil class. The method incorrectly determines whether a SAML signature is for the full document or only for specific assertions based on the position of the signature in the XML document, rather than the Reference element used to specify the signed element. This flaw allows attackers to create crafted responses that can bypass the validation, potentially leading to privilege escalation or impersonation attacks.

Affected packages

Package

Name: org.keycloak:keycloak-saml-core

Purl: pkg:maven/org.keycloak/keycloak-saml-core

Affected ranges

Type: ECOSYSTEM

Events:

Introduced- 0

Fixed -25.0.6

Affected versions

1.1.0.Beta1

1.1.0.Beta2

1.1.0.Final

1.1.1.Final

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High