cve/2016/CVE-2016-5697.md

CVE-2016-5697

Description

Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/borourke/ruby-saml
• https://github.com/cpkenn09y/Ruby-SAML-modified
• https://github.com/cpkenn09y/Ruby-Saml-Modified-1.9.0
• https://github.com/pvijayfullstack/saml2.0_ruby
• https://github.com/pvijayfullstack/saml2_ruby