[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcX8hPV_T3mt31K_NYkej4pUOhn-CL1ZL1Bri9rbbD0c":3,"g5a-risk:CVE-2024-45409":200},{"success":4,"data":5,"meta":197},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":63,"references":64,"referencesCount":96,"weaknesses":97,"weaknessesCount":106,"isActivelyExploited":107,"cisaInfo":29,"otxData":29,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":181,"notableEvents":182},"CVE-2024-45409","What is CVE-2024-45409?","The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in \u003C= 12.2 and 1.13.0 \u003C= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by the IdP) can thus forge a SAML Response\u002FAssertion with arbitrary contents. This would allow the attacker to log in as arbitrary user within the vulnerable system. This vulnerability is fixed in 1.17.0 and 1.12.3.","The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in \u003C= 12.2 and 1.13.0 \u003C= 1.16.0 does not properly verify the sig...","2024-09-10T19:15:22.03","2026-06-17T07:54:09.65",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":40},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N","NETWORK","LOW","NONE","CHANGED","HIGH",10,"CRITICAL",null,3.9,5.8,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":37},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":36,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"UNCHANGED",5.9,[],[],[],0.10684,[41,41,41,41,41,41,41],"Critical",[45,50,54,57,60],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"onelogin","ruby-saml","*","cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":48,"criteria":53,"vulnerable":4},"omniauth","omniauth_saml","cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:ruby:*:*",{"vendor":51,"product":52,"version":55,"criteria":56,"vulnerable":4},"2.0.0","cpe:2.3:a:omniauth:omniauth_saml:2.0.0:*:*:*:*:ruby:*:*",{"vendor":51,"product":52,"version":58,"criteria":59,"vulnerable":4},"2.1.0","cpe:2.3:a:omniauth:omniauth_saml:2.1.0:*:*:*:*:ruby:*:*",{"vendor":61,"product":61,"version":48,"criteria":62,"vulnerable":4},"gitlab","cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*",5,[65,70,73,77,80,84,88,92],{"url":66,"source":67,"tags":68},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fcommit\u002F1ec5392bc506fe43a02dbb66b68741051c5ffeae","GitHub",[69],"Patch",{"url":71,"source":67,"tags":72},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fcommit\u002F4865d030cae9705ee5cdb12415c654c634093ae7",[69],{"url":74,"source":67,"tags":75},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fsecurity\u002Fadvisories\u002FGHSA-jw9c-mfg7-9rx2",[76],"Vendor Advisory",{"url":78,"source":67,"tags":79},"https:\u002F\u002Fgithub.com\u002Fomniauth\u002Fomniauth-saml\u002Fsecurity\u002Fadvisories\u002FGHSA-cvp8-5r8g-fhvq",[76],{"url":81,"source":82,"tags":83},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F11\u002Fmsg00006.html","Debian",[],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=41586031","Ycombinator",[],{"url":89,"source":90,"tags":91},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20240926-0008\u002F","Netapp",[],{"url":93,"source":94,"tags":95},"https:\u002F\u002Fssoready.com\u002Fblog\u002Fengineering\u002Fruby-saml-pwned-by-xml-signature-wrapping-attacks\u002F","Ssoready",[],8,[98],{"id":99,"name":100,"description":101,"extendedDescription":102,"status":103,"abstraction":104,"structure":105},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2024-45409? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-45409, a critical severity cyber security vulnerability from 2024. The Ruby SAML library is for implementing the client si...","CVE-2024-45409, CVE-2024-45409 vulnerability, CVE-2024-45409 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, onelogin security, omniauth security, gitlab security, ruby-saml vulnerability, omniauth_saml vulnerability, gitlab vulnerability","\u002Fwhat-is\u002Fcve-2024-45409",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":10,"dateModified":11,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-45409","Cybersecurity","CVE-2024-45409, CVE-2024-45409 vulnerability, CVE-2024-45409 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135,147,158],{"Operator":29,"Negate":29,"Nodes":136},[137],{"Operator":138,"Negate":107,"CPEMatch":139},"OR",[140,143],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":141,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":142,"VersionEndIncluding":29},"DF41BEEE-FC5B-4728-B9BE-0B58C04F547E","1.12.3",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":144,"VersionStartExcluding":29,"VersionStartIncluding":145,"VersionEndExcluding":146,"VersionEndIncluding":29},"ADBA67BE-BC31-48C0-A36F-9431814178C0","1.13.0","1.17.0",{"Operator":29,"Negate":29,"Nodes":148},[149],{"Operator":138,"Negate":107,"CPEMatch":150},[151,154,156],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":152,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":153},"6D978907-97A8-4EF4-BF81-FE8702C24745","1.10.3",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":155,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"527AEDE3-F8EB-4C38-AF51-3B679AC4E336",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":157,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"3F307538-4D4D-4DD1-A9A0-F4D06E20163E",{"Operator":29,"Negate":29,"Nodes":159},[160],{"Operator":138,"Negate":107,"CPEMatch":161},[162,165,169,173,177],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":163,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":164,"VersionEndIncluding":29},"7000556E-4EBB-4B99-84B1-A2EEA709311C","16.11.10",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":166,"VersionStartExcluding":29,"VersionStartIncluding":167,"VersionEndExcluding":168,"VersionEndIncluding":29},"3B47FDB0-B642-4E50-B0B6-1D71545FE917","17.0.0","17.0.8",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":170,"VersionStartExcluding":29,"VersionStartIncluding":171,"VersionEndExcluding":172,"VersionEndIncluding":29},"86B327A7-22C7-488F-ABA6-3AC90EF07D04","17.1.0","17.1.8",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":174,"VersionStartExcluding":29,"VersionStartIncluding":175,"VersionEndExcluding":176,"VersionEndIncluding":29},"E831CA83-DDA9-4F47-BCF8-2CBB7E74C9DC","17.2.0","17.2.7",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":178,"VersionStartExcluding":29,"VersionStartIncluding":179,"VersionEndExcluding":180,"VersionEndIncluding":29},"60003658-012F-4DB8-9D8F-8E48C14CA0C4","17.3.0","17.3.3",[],[183,190],{"id":184,"eventType":185,"eventTime":186,"details":187,"label":188,"color":189},"5f708d8e-6a62-4de5-9f86-34368d02c09d","LOW_EPSS_DELTA","2025-06-11T10:09:54.908676+00:00","Daily EPSS score decreased by 0.346 on 2024-09-12","EPSS Score Decreased","green",{"id":191,"eventType":192,"eventTime":193,"details":194,"label":195,"color":196},"1411711e-0489-4a30-975a-54d6c3fa32ab","HIGH_EPSS_DELTA","2025-10-20T04:04:31.309252+00:00","Daily EPSS score increased by 0.215 on 2024-09-12","EPSS Score Increased","red",{"lastModified":11,"cacheTime":198,"version":199},1792356466575,"2.0",{"score":201,"band":202,"action":203,"scoredAt":204},56,"Medium","Plan remediation","2026-10-16T07:03:46.154765+00:00"]