ByteOS Network

NVD Vulnerability Details :

CVE-2025-25293

Analyzed

Source-security-advisories@github.com

Published At-12 Mar, 2025 | 21:15

Updated At-01 Aug, 2025 | 14:45

ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	7.7	HIGH	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CPE Matches

omniauth>>omniauth_saml>>Versions before 1.10.6(exclusive)

cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:ruby:*:*

omniauth>>omniauth_saml>>Versions from 2.0.0(inclusive) to 2.1.3(exclusive)

cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:ruby:*:*

omniauth>>omniauth_saml>>Versions from 2.2.0(inclusive) to 2.2.3(exclusive)

cpe:2.3:a:omniauth:omniauth_saml:*:*:*:*:*:ruby:*:*

onelogin>>ruby-saml>>Versions before 1.12.4(exclusive)

cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*

onelogin>>ruby-saml>>Versions from 1.13.0(inclusive) to 1.18.0(exclusive)

cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-400	Secondary	security-advisories@github.com

References

Hyperlink	Source	Resource
https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released	security-advisories@github.com	Patch
https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials	security-advisories@github.com	Exploit Third Party Advisory
https://github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349a	security-advisories@github.com	Patch
https://github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1	security-advisories@github.com	Patch
https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.12.4	security-advisories@github.com	Release Notes
https://github.com/SAML-Toolkits/ruby-saml/releases/tag/v1.18.0	security-advisories@github.com	Release Notes
https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrq	security-advisories@github.com	Vendor Advisory
https://github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xv	security-advisories@github.com	Vendor Advisory
https://security.netapp.com/advisory/ntap-20250314-0008/	af854a3a-2127-422b-91ae-364da2661108	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History