OneLogin Inc Information for VU#475445

Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal

Status

Affected

Vendor Statement

Refer to the vendor's official notice.

Vendor Information

Refer to the vendor's official notice.

Vendor References

https://support.onelogin.com/hc/en-us/articles/360001271891

Addendum

Specific patch commits: