CVE-2021-23365 — Authentication Bypass
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass.…
Published: 2021-04-26 · CVSS: 4.8 · CVSS 3.1
The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data).
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7