[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7638p1B8diiSxvD7QN-TQoLwVx_bgHtzPPpO_9LyLow":3,"g5a-risk:CVE-2022-41912":113},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":27,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":46,"references":47,"referencesCount":62,"weaknesses":63,"weaknessesCount":46,"isActivelyExploited":72,"cisaInfo":27,"otxData":27,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":108,"notableEvents":109},"CVE-2022-41912","What is CVE-2022-41912?","The crewjam\u002Fsaml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements. This issue has been corrected in version 0.4.9. There are no workarounds other than upgrading to a fixed version.","The crewjam\u002Fsaml go library prior to version 0.4.9 is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion ele...","2022-11-28T15:15:10.46","2023-02-01T15:48:30.92",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":36},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":34,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",9.1,5.2,0.02325,[37,37,37,37,37,37,37],"Critical",[41],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"saml_project","saml","*","cpe:2.3:a:saml_project:saml:*:*:*:*:*:go:*:*",1,[48,54,59],{"url":49,"source":50,"tags":51},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F170356\u002Fcrewjam-saml-Signature-Bypass.html","Packetstormsecurity",[52,53],"Third Party Advisory","VDB Entry",{"url":55,"source":56,"tags":57},"https:\u002F\u002Fgithub.com\u002Fcrewjam\u002Fsaml\u002Fcommit\u002Faee3fb1edeeaf1088fcb458727e0fd863d277f8b","GitHub",[58,52],"Patch",{"url":60,"source":56,"tags":61},"https:\u002F\u002Fgithub.com\u002Fcrewjam\u002Fsaml\u002Fsecurity\u002Fadvisories\u002FGHSA-j2jp-wvqg-wc2g",[52],3,[64],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-41912? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-41912, a critical severity cyber security vulnerability from 2022. The crewjam\u002Fsaml go library prior to version 0.4.9 is v...","CVE-2022-41912, CVE-2022-41912 vulnerability, CVE-2022-41912 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, saml_project security, saml vulnerability","\u002Fwhat-is\u002Fcve-2022-41912",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-41912","Cybersecurity","CVE-2022-41912, CVE-2022-41912 vulnerability, CVE-2022-41912 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":27,"Negate":27,"Nodes":101},[102],{"Operator":103,"Negate":27,"CPEMatch":104},"OR",[105],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":106,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":107,"VersionEndIncluding":27},"8908B8DF-DF74-4205-A9D0-D9F28819636D","0.4.9",[],[],{"lastModified":11,"cacheTime":111,"version":112},1792358104866,"2.0",{"score":114,"band":115,"action":116,"scoredAt":117},55,"Medium","Plan remediation","2026-10-16T06:56:23.240267+00:00"]