[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOHO8Pm-IyFznD2AnhTTe8Fupg3HcbcuDqeraUrz1WN8":3,"g5a-risk:CVE-2020-27847":116},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":66,"weaknesses":67,"weaknessesCount":48,"isActivelyExploited":76,"cisaInfo":27,"otxData":27,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":112,"notableEvents":113},"CVE-2020-27847","What is CVE-2020-27847?","A vulnerability exists in the SAML connector of the github.com\u002Fdexidp\u002Fdex library used to process SAML Signature Validation. This flaw allows an attacker to bypass SAML authentication. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. This flaw affects dex versions before 2.27.0.","A vulnerability exists in the SAML connector of the github.com\u002Fdexidp\u002Fdex library used to process SAML Signature Validation. This flaw allows an attacker to ...","2021-05-28T11:15:07.703","2023-11-07T03:21:03.77",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":25,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.01718,[39,39,39,39,39,39,39],"Critical",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"linuxfoundation","dex","*","cpe:2.3:a:linuxfoundation:dex:*:*:*:*:*:*:*:*",1,[50,56,61],{"url":51,"source":52,"tags":53},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=1907732","Red Hat",[54,55],"Issue Tracking","Third Party Advisory",{"url":57,"source":58,"tags":59},"https:\u002F\u002Fgithub.com\u002Fdexidp\u002Fdex\u002Fsecurity\u002Fadvisories\u002FGHSA-m9hp-7r99-94h5","GitHub",[60,55],"Patch",{"url":62,"source":63,"tags":64},"https:\u002F\u002Fmattermost.com\u002Fblog\u002Fcoordinated-disclosure-go-xml-vulnerabilities\u002F","Mattermost",[65],"Vendor Advisory",3,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-228","Improper Handling of Syntactically Invalid Structure","The product does not handle or incorrectly handles input that is not syntactically well-formed with respect to the associated specification.","","Incomplete","Class","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2020-27847? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-27847, a critical severity cyber security vulnerability from 2021. A vulnerability exists in the SAML connector of the git...","CVE-2020-27847, CVE-2020-27847 vulnerability, CVE-2020-27847 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, linuxfoundation security, dex vulnerability","\u002Fwhat-is\u002Fcve-2020-27847",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-27847","Cybersecurity","CVE-2020-27847, CVE-2020-27847 vulnerability, CVE-2020-27847 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":27,"Negate":27,"Nodes":105},[106],{"Operator":107,"Negate":27,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":111,"VersionEndIncluding":27},"6DED3272-1D65-4A06-97D5-73FC7EE37516","2.27.0",[],[],{"lastModified":11,"cacheTime":115,"version":33},1792437323939,{"score":117,"band":118,"action":119,"scoredAt":120},54,"Medium","Plan remediation","2026-10-16T06:51:13.878902+00:00"]