A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
References
| Link | Resource |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2025-2196 | Third Party Advisory Exploit |
| https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2196 | Third Party Advisory Exploit |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2025, 20:02
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Entrouvert lasso
Entrouvert |
|
| CPE | cpe:2.3:a:entrouvert:lasso:2.8.2:*:*:*:*:*:*:* cpe:2.3:a:entrouvert:lasso:2.5.1:*:*:*:*:*:*:* |
|
| References | () https://talosintelligence.com/vulnerability_reports/TALOS-2025-2196 - Third Party Advisory, Exploit | |
| References | () https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2196 - Third Party Advisory, Exploit |
05 Nov 2025, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
05 Nov 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
05 Nov 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-11-05 15:15
Updated : 2025-11-07 20:02
NVD link : CVE-2025-46705
Mitre link : CVE-2025-46705
CVE.ORG link : CVE-2025-46705
JSON object : View
Products Affected
entrouvert
- lasso
CWE
CWE-617
Reachable Assertion