CVE-2020-27846

Name of the Vulnerable Software and Affected Versions crewjam/saml (affected versions not specified)

Description A signature verification issue exists, allowing an attacker to bypass SAML Authentication, posing a threat to confidentiality, integrity, and system availability. This issue can be exploited by forging part of a signed XML document. The go encoding/xml package is also affected, where a crafted XML document may cause XML Digital Signature validation to be entirely bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.