[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f5dseDdeg75JWHCVtZ33GPfxNnafVqOMNjSwRY3hd4lM":3,"g5a-risk:CVE-2025-25292":191},{"success":4,"data":5,"meta":188},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":50,"references":51,"referencesCount":104,"weaknesses":105,"weaknessesCount":121,"isActivelyExploited":122,"cisaInfo":27,"otxData":27,"relatedBlogPosts":123,"seoMetadata":124,"configurations":149,"relatedVendorCves":179,"notableEvents":180},"CVE-2025-25292","What is CVE-2025-25292?","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.","ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml pri...","2025-03-12T21:15:42.177","2025-11-03T20:17:58.943",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.65086,[32,32,32,32,32,32,32],"Critical",[36,41,45],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"omniauth","omniauth_saml","*","cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:ruby:*:*",{"vendor":42,"product":43,"version":39,"criteria":44,"vulnerable":4},"onelogin","ruby-saml","cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"netapp","storagegrid","-","cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",3,[52,57,63,67,70,74,77,81,84,88,91,95,100],{"url":53,"source":54,"tags":55},"https:\u002F\u002Fabout.gitlab.com\u002Freleases\u002F2025\u002F03\u002F12\u002Fpatch-release-gitlab-17-9-2-released","Gitlab",[56],"Patch",{"url":58,"source":59,"tags":60},"https:\u002F\u002Fgithub.blog\u002Fsecurity\u002Fsign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials","Github",[61,62],"Exploit","Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fcommit\u002Fe76c5b36bac40aedbf1ba7ffaaf495be63328cd9","GitHub",[56],{"url":68,"source":65,"tags":69},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fcommit\u002Fe9c1cdbd0f9afa467b585de279db0cbd0fb8ae97",[56],{"url":71,"source":65,"tags":72},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Freleases\u002Ftag\u002Fv1.12.4",[73],"Release Notes",{"url":75,"source":65,"tags":76},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Freleases\u002Ftag\u002Fv1.18.0",[73],{"url":78,"source":65,"tags":79},"https:\u002F\u002Fgithub.com\u002FSAML-Toolkits\u002Fruby-saml\u002Fsecurity\u002Fadvisories\u002FGHSA-754f-8gm6-c4r2",[80],"Vendor Advisory",{"url":82,"source":65,"tags":83},"https:\u002F\u002Fgithub.com\u002Fomniauth\u002Fomniauth-saml\u002Fsecurity\u002Fadvisories\u002FGHSA-hw46-3hmr-x9xv",[80],{"url":85,"source":86,"tags":87},"https:\u002F\u002Fportswigger.net\u002Fresearch\u002Fsaml-roulette-the-hacker-always-wins","Portswigger",[61,62],{"url":89,"source":65,"tags":90},"https:\u002F\u002Fsecuritylab.github.com\u002Fadvisories\u002FGHSL-2024-329_GHSL-2024-330_ruby-saml",[62],{"url":92,"source":93,"tags":94},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2025\u002F04\u002Fmsg00011.html","Debian",[],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fnews.ycombinator.com\u002Fitem?id=43374519","Ycombinator",[99],"Issue Tracking",{"url":101,"source":102,"tags":103},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250314-0009\u002F","Netapp",[62],13,[106,114],{"id":107,"name":108,"description":109,"extendedDescription":110,"status":111,"abstraction":112,"structure":113},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",{"id":115,"name":116,"description":117,"extendedDescription":118,"status":119,"abstraction":120,"structure":113},"CWE-436","Interpretation Conflict","Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.","This is generally found in proxies, firewalls, anti-virus software, and other intermediary devices that monitor, allow, deny, or modify traffic based on how the client or server is expected to behave.","Incomplete","Class",2,false,[],{"title":125,"metaDescription":126,"keywords":127,"canonicalUrl":128,"structuredData":129},"What is CVE-2025-25292? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-25292, a critical severity cyber security vulnerability from 2025. High exploit probability (65.1%). ruby-saml provides se...","CVE-2025-25292, CVE-2025-25292 vulnerability, CVE-2025-25292 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, omniauth security, onelogin security, netapp security, omniauth_saml vulnerability, ruby-saml vulnerability, storagegrid vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2025-25292",{"@context":130,"@type":131,"headline":125,"description":126,"datePublished":10,"dateModified":11,"author":132,"publisher":136,"about":140,"mainEntityOfPage":144,"articleSection":147,"keywords":148},"https:\u002F\u002Fschema.org","TechArticle",{"@type":133,"name":134,"url":135},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":133,"name":134,"url":135,"logo":137},{"@type":138,"url":139},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":141,"name":6,"description":142,"additionalType":143},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":145,"@id":146},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-25292","Cybersecurity","CVE-2025-25292, CVE-2025-25292 vulnerability, CVE-2025-25292 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[150,173],{"Operator":27,"Negate":27,"Nodes":151},[152],{"Operator":153,"Negate":122,"CPEMatch":154},"OR",[155,158,162,166,169],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":157,"VersionEndIncluding":27},"AB57A4CB-E546-42D7-AB8D-D86E979C80C1","1.10.6",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":160,"VersionEndExcluding":161,"VersionEndIncluding":27},"58E37D56-71A9-417D-B0DD-EBDC2EA3855F","2.0.0","2.1.3",{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":164,"VersionEndExcluding":165,"VersionEndIncluding":27},"9549FF35-D7A0-446A-87C8-552C8D89CD92","2.2.0","2.2.3",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":167,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":168,"VersionEndIncluding":27},"EB0F9A57-0F32-4ECC-97B4-1F87DD7D7FD6","1.12.4",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":170,"VersionStartExcluding":27,"VersionStartIncluding":171,"VersionEndExcluding":172,"VersionEndIncluding":27},"455E8699-D6C2-4BFF-B4FD-2329E0F1E910","1.13.0","1.18.0",{"Operator":27,"Negate":27,"Nodes":174},[175],{"Operator":153,"Negate":122,"CPEMatch":176},[177],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":178,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"8ADFF451-740F-4DBA-BD23-3881945D3E40",[],[181],{"id":182,"eventType":183,"eventTime":184,"details":185,"label":186,"color":187},"4d3e4c8d-7c3a-438d-a878-e238bc0c2371","HIGH_EPSS_DELTA","2026-06-16T04:04:18.807313+00:00","Daily EPSS score increased by 0.605 on 2025-03-14","EPSS Score Increased","red",{"lastModified":11,"cacheTime":189,"version":190},1792364783192,"2.0",{"score":192,"band":193,"action":194,"scoredAt":195},63,"Medium","Plan remediation","2026-10-16T07:06:22.551633+00:00"]