CVE-2025-47151 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML resp…
Critical CVSS: 9.8

CVE-2025-47151

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
Vendor
Entrouvert
Product
Lasso
CWE
CWE-843
Yayın Tarihi
2025-11-05 15:15:39
Güncelleme
2025-11-07 19:53:04
Source Identifier
talos-cna@cisco.com
KEV Date Added
-

Kategoriler

CWE-843 Lasso CRITICAL Entrouvert 2025

Referanslar

https://talosintelligence.com/vulnerability_reports/TALOS-2025-2193 https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2193