CVE-2024-25718

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-25718
In the Samly package before 1.4.0 for Elixir, Samly.State.Store.get_assertion/3 can return an expired session, which interferes with access control because Samly.AuthHandler uses a cached session and does not replace it, even after expiry.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://diff.hex.pm/diff/samly/1.3.0..1.4.0 Patch
https://github.com/dropbox/samly Product
https://github.com/dropbox/samly/pull/13 Patch
https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb Patch
https://github.com/handnot2/samly Product
https://hex.pm/packages/samly Release Notes
https://diff.hex.pm/diff/samly/1.3.0..1.4.0 Patch
https://github.com/dropbox/samly Product
https://github.com/dropbox/samly/pull/13 Patch
https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb Patch
https://github.com/handnot2/samly Product
https://hex.pm/packages/samly Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:dropbox:samly:*:*:*:*:*:elixir:*:*
History

21 Nov 2024, 09:01

Type Values Removed Values Added
References () https://diff.hex.pm/diff/samly/1.3.0..1.4.0 - Patch () https://diff.hex.pm/diff/samly/1.3.0..1.4.0 - Patch
References () https://github.com/dropbox/samly - Product () https://github.com/dropbox/samly - Product
References () https://github.com/dropbox/samly/pull/13 - Patch () https://github.com/dropbox/samly/pull/13 - Patch
References () https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb - Patch () https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb - Patch
References () https://github.com/handnot2/samly - Product () https://github.com/handnot2/samly - Product
References () https://hex.pm/packages/samly - Release Notes () https://hex.pm/packages/samly - Release Notes

21 Oct 2024, 20:29

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 9.1 		v2 : unknown
v3 : 9.8
CWE CWE-613
CPE cpe:2.3:a:dropbox:samly:*:*:*:*:*:elixir:*:*
First Time Dropbox samly
Dropbox
References () https://diff.hex.pm/diff/samly/1.3.0..1.4.0 - () https://diff.hex.pm/diff/samly/1.3.0..1.4.0 - Patch
References () https://github.com/dropbox/samly - () https://github.com/dropbox/samly - Product
References () https://github.com/dropbox/samly/pull/13 - () https://github.com/dropbox/samly/pull/13 - Patch
References () https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb - () https://github.com/dropbox/samly/pull/13/commits/812b5c3ad076dc9c9334c1a560c8e6470607d1eb - Patch
References () https://github.com/handnot2/samly - () https://github.com/handnot2/samly - Product
References () https://hex.pm/packages/samly - () https://hex.pm/packages/samly - Release Notes

01 Aug 2024, 20:35

Type Values Removed Values Added
CWE CWE-400
Summary
  • (es) En el paquete Samly anterior a 1.4.0 para Elixir, Samly.State.Store.get_assertion/3 puede devolver una sesión caducada, lo que interfiere con el control de acceso porque Samly.AuthHandler usa una sesión almacenada en caché y no la reemplaza, incluso después de su vencimiento.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 9.1

11 Feb 2024, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-11 05:15

Updated : 2024-11-21 09:01

NVD link : CVE-2024-25718

Mitre link : CVE-2024-25718

CVE.ORG link : CVE-2024-25718

JSON object : View

Products Affected

dropbox

  • samly
CWE
CWE-613

Insufficient Session Expiration

CWE-400

Uncontrolled Resource Consumption