{"id":"CVE-2016-5697","published":"2017-01-23T21:00:00Z","modified":"2024-08-06T01:07:59Z","title":"Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors","vendor":null,"product":null,"tier":"tail","description":{"text":"Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01208,"percentile":0.68166,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/06/24/3","tags":["mailing-list","x_refsource_MLIST"]}],"priority":{"score":13.6,"factors":[{"name":"EPSS percentile","points":13.63}]},"affected":[{"ecosystem":"RubyGems","package":"ruby-saml","vulnerableRanges":["<1.3.0"],"patched":["1.3.0"],"from":["GHSA-36p7-xjw8-h6f2"],"provenance":"source"}],"euvd":{"id":"EUVD-2018-0357","exploited":false,"provenance":"source"}}