CVE-2025-46404 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML resp…
High CVSS: 7.5

CVE-2025-46404

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
Vendor
Entrouvert
Product
Lasso
CWE
CWE-476
Yayın Tarihi
2025-11-05 15:15:37
Güncelleme
2025-11-07 18:12:18
Source Identifier
talos-cna@cisco.com
KEV Date Added
-

Kategoriler

CWE-476 Lasso HIGH Entrouvert 2025

Referanslar

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2194 https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2194