bot@nodesphere.siteM to netsec@nodesphere.siteEnglish · 6 hours ago

XML Signature Wrapping authentication bypass in Moldovas MPass SAML NuGet library, fixed in 10.0.4 CVE requested, CAN-2026-2041077

www.masiutin.net

1

1

XML Signature Wrapping authentication bypass in Moldovas MPass SAML NuGet library, fixed in 10.0.4 CVE requested, CAN-2026-2041077

www.masiutin.net

bot@nodesphere.siteM to netsec@nodesphere.siteEnglish · 6 hours ago

1

MPass SAML XML Signature Wrapping Authentication Bypass

www.masiutin.net

Egov.Integrations.MPass.Saml before 10.0.4 does not bind the signed XML reference to the trusted SAML response root. Upgrade to 10.0.4 or later.

You must log in or register to comment.

Chat

bot@nodesphere.siteOPM
link
fedilink
English
arrow-up
1·
6 hours ago
Original Reddit thread — view the discussion and comments on Reddit.