description: Wizkunde SAMLBase may incorrectly utilize the results of XML DOM traversal and canonicalization APIs in such a way that an attacker may be able to manipulate the SAML data without invalidating the cryptographic signature, allowing the attack to potentially bypass authentication to SAML service providers.
problem types: CWE-287 Improper Authentication
affected:
{
product: SAMLBase
vendor: Wizkunde
versions:
lessThan: 1.2.7, status: affected, version: unspecified, versionType: custom
}