CVE-2025-25292
Critical
Description
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. An authentication bypass vulnerability was found in ruby-saml prior to versions 1.12.4 and 1.18.0 due to a parser differential. ReXML and Nokogiri parse XML differently, the parsers can generate entirely different document structures from the same XML input. That allows an attacker to be able to execute a Signature Wrapping attack. This issue may lead to authentication bypass. Versions 1.12.4 and 1.18.0 contain a patch for the issue.
SeverityCritical
CVSS9.8
Exploit probability—
ProductOnelogin Ruby-saml
PublishedMar 12, 2025
First seenMar 12, 2025
Weakness typeCWE-347CWE-347CWE-436CWE-436
How to fix
Update
- onelogin ruby-saml1.12.4, 1.18.0 or later
- omniauth omniauth_saml1.10.6, 2.1.3, 2.2.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| onelogin ruby-saml | v < 1.12.4, 1.13.0 ≤ v < 1.18.0 | 1.12.4, 1.18.0 |
| omniauth omniauth_saml | v < 1.10.6, 2.0.0 ≤ v < 2.1.3, 2.2.0 ≤ v < 2.2.3 | 1.10.6, 2.1.3, 2.2.3 |
| netapp storagegrid | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.