GHSA-5mqj-xc49-246pHighCVSS 7.5

crewjam/saml vulnerable to Denial Of Service Via Deflate Decompression Bomb

Published
March 22, 2023
Last Modified
March 23, 2023

🔗 CVE IDs covered (1)

CVE-2023-28119 →

📋 Description

Our use of flate.NewReader does not limit the size of the input. The user could pass more than 1 MB of data in the HTTP request to the processing functions, which will be decompressed server-side using the Deflate algorithm. Therefore, after repeating the same request multiple times, it is possible to achieve a reliable crash since the operating system kills the process.

🎯 Affected products1

  • go/github.com/crewjam/saml:< 0.4.13

🔗 References (4)