CVE-2025-46573
High
Description
passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response. Users are affected specifically when the service provider is using `passport-wsfed-saml2` and a valid SAML Response signed by the Identity Provider can be obtained. Version 4.6.4 contains a fix for the vulnerability.
SeverityHigh
CVSS8.6
Exploit probability—
ProductPassport-wsfed-saml2
PublishedMay 6, 2025
First seenMay 6, 2025
Weakness typeCWE-287Improper authentication
How to fix
Update
- passport-wsfed-saml24.6.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| passport-wsfed-saml2npm | 3.0.5 ≤ v < 4.6.4 | 4.6.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.