Passport Wsfed Saml2

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-23505 npm HIGH PATCH This Week

Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Passport Wsfed Saml2

NVD GitHub

CVSS 3.1

7.5

EPSS

0.8%

CVE-2017-16897 npm HIGH PATCH This Week

A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions < 3.0.5. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required.

Authentication Bypass Passport Wsfed Saml2 Auth0

NVD

CVSS 3.0

8.1

EPSS

0.4%

CVE-2022-23505 npm

EPSS 1% CVSS 7.5

HIGH PATCH This Week

Authentication Bypass Passport Wsfed Saml2

NVD GitHub

CVE-2017-16897 npm

EPSS 0% CVSS 8.1

HIGH PATCH This Week

Authentication Bypass Passport Wsfed Saml2 Auth0

NVD