ID:11134 - Exploit for Improper Verification of Cryptographic Signature in passport-saml - CVE-2022-39299

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to bypass security restrictions.

The vulnerability exists due to application does not properly control consumption of internal resources. A remote attacker can use an arbitrary IDP signed XML element to bypass SAML authentication on a website using passport-saml

Remediation