216.73.216.6

CVE-2025-66568

· Published 09/12/2025 16:18 · Modified 10/12/2025 21:25

Labels: CVE-2025-66568 2025-12-09CVE-2025-66568CWE-347[email protected]

Essential information

Published
09/12/2025 16:18
Modified
10/12/2025 21:25
Author
Creator
CVSS
9.3 CRITICAL (v3) 9.3 CRITICAL (v4.0)
CISA KEV
No
CWE
CVSS vector

CVSS metrics

Description

The ruby-saml library implements the client side of an SAML authorization. Versions up to and including 1.12.4, are vulnerable to authentication bypass through the libxml2 canonicalization process used by Nokogiri for document transformation, which allows an attacker to execute a Signature Wrapping attack. When libxml2’s canonicalization is invoked on an invalid XML input, it may return an empty string rather than a canonicalized node. ruby-saml then proceeds to compute the DigestValue over this empty string, treating it as if canonicalization succeeded. This issue is fixed in version 1.18.0.

NVD status

Status
Analyzed — CVE has had analysis completed and all data associations made.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
onelogin / ruby-saml cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*

References