[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcGkz5bBfsbt5Wqgw84Ns495dKtqb-pFJnXfX_UiwAto":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":81,"topProductsByCves":82,"seoMetadata":86,"meta":95},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":32},22603,"onelogin",3,9,0,120,"2025-03-12","o",[16,21,27],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},122513,"ruby-saml",68,7,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},122511,"onelogin_saml_sso",29,1,"2019-08-22",{"id":28,"product_name":29,"version_count":30,"cve_count":25,"kev_count":11,"last_cve_update":31},122512,"pythonsaml",23,"2019-04-17","Onelogin is a technology vendor with 3 tracked products and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[34,42,46,52,57,61,67,71,76],{"cveId":35,"description":36,"publishedDate":13,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":41},"CVE-2025-25292","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.",9.8,"v3.1","Critical",false,0.65086,{"cveId":43,"description":44,"publishedDate":13,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":45},"CVE-2025-25291","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently; the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 fix the issue.",0.20965,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":51},"CVE-2024-45409","The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in \u003C= 12.2 and 1.13.0 \u003C= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response\u002FAssertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.","2024-09-10",10,0.10684,{"cveId":53,"description":54,"publishedDate":31,"cvssScore":37,"cvssVersion":55,"severity":39,"isKev":40,"epssScore":56},"CVE-2017-11427","OneLogin PythonSAML 2.3.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.","v3.0",0.04697,{"cveId":58,"description":59,"publishedDate":31,"cvssScore":37,"cvssVersion":55,"severity":39,"isKev":40,"epssScore":60},"CVE-2017-11428","OneLogin Ruby-SAML 1.6.0 and earlier may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.",0.02464,{"cveId":62,"description":63,"publishedDate":26,"cvssScore":64,"cvssVersion":55,"severity":65,"isKev":40,"epssScore":66},"CVE-2016-10928","The onelogin-saml-sso plugin before 2.2.0 for WordPress has a hardcoded @@@nopass@@@ password for just-in-time provisioned users.",7.5,"High",0.01679,{"cveId":68,"description":69,"publishedDate":13,"cvssScore":64,"cvssVersion":38,"severity":65,"isKev":40,"epssScore":70},"CVE-2025-25293","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.",0.01528,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":40,"epssScore":75},"CVE-2015-20108","xml_security.rb in the ruby-saml gem before 1.0.0 for Ruby allows XPath injection and code execution because prepared statements are not used.","2023-05-27",0.01332,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":64,"cvssVersion":55,"severity":65,"isKev":40,"epssScore":80},"CVE-2016-5697","Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.","2017-01-23",0.01208,[],[83,84,85],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":30,"cve_count":25,"kev_count":11,"last_cve_update":31},{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Onelogin - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Onelogin covering 3 products with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Onelogin vulnerabilities, Onelogin security, Onelogin CVE, Onelogin threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":91,"@type":92,"name":93,"description":88,"url":94},"https:\u002F\u002Fschema.org","Organization","Onelogin","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fonelogin",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":96,"apiVersion":97},"2026-10-18T20:37:46.473Z","3.0"]