data/reports: add GO-2022-1129.yaml

Aliases: CVE-2022-41912, GHSA-j2jp-wvqg-wc2g Fixes #1129 Change-Id: Ia0ba316da7179b21035db9203a6c3725ac3cbfec Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/453937 Reviewed-by: Tatiana Bradley <tatiana@golang.org> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Julie Qiu <julieqiu@google.com> Run-TryBot: Julie Qiu <julie@golang.org>
golang · Nov 29, 2022 · bf4f930 · bf4f930
1 parent df91012
commit bf4f930
Show file tree

Hide file tree

Showing 2 changed files with 95 additions and 0 deletions.
diff --git a/data/osv/GO-2022-1129.json b/data/osv/GO-2022-1129.json
@@ -0,0 +1,67 @@
+{
+  "id": "GO-2022-1129",
+  "published": "0001-01-01T00:00:00Z",
+  "modified": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2022-41912",
+    "GHSA-j2jp-wvqg-wc2g"
+  ],
+  "details": "Authentication bypass is possible when processing SAML responses containing multiple Assertion elements.",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/crewjam/saml",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.4.9"
+            }
+          ]
+        }
+      ],
+      "database_specific": {
+        "url": "https://pkg.go.dev/vuln/GO-2022-1129"
+      },
+      "ecosystem_specific": {
+        "imports": [
+          {
+            "path": "github.com/crewjam/saml",
+            "symbols": [
+              "ServiceProvider.ParseResponse",
+              "ServiceProvider.ParseXMLArtifactResponse",
+              "ServiceProvider.ParseXMLResponse",
+              "ServiceProvider.ValidateLogoutResponseForm",
+              "ServiceProvider.ValidateLogoutResponseRedirect",
+              "ServiceProvider.ValidateLogoutResponseRequest",
+              "ServiceProvider.validateSignature",
+              "findChild"
+            ]
+          }
+        ]
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://github.com/prometheus/exporter-toolkit/security/advisories/GHSA-7rg2-cxvp-9p7p"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/crewjam/saml/commit/aee3fb1edeeaf1088fcb458727e0fd863d277f8b"
+    }
+  ],
+  "credits": [
+    {
+      "name": "Felix Wilhelm from Google Project Zero"
+    }
+  ],
+  "schema_version": "1.3.1"
+}
diff --git a/data/reports/GO-2022-1129.yaml b/data/reports/GO-2022-1129.yaml
@@ -0,0 +1,28 @@
+modules:
+  - module: github.com/crewjam/saml
+    versions:
+      - fixed: 0.4.9
+    vulnerable_at: 0.4.8
+    packages:
+      - package: github.com/crewjam/saml
+        symbols:
+          - ServiceProvider.validateSignature
+          - findChild
+        derived_symbols:
+          - ServiceProvider.ParseResponse
+          - ServiceProvider.ParseXMLArtifactResponse
+          - ServiceProvider.ParseXMLResponse
+          - ServiceProvider.ValidateLogoutResponseForm
+          - ServiceProvider.ValidateLogoutResponseRedirect
+          - ServiceProvider.ValidateLogoutResponseRequest
+description: |
+    Authentication bypass is possible when processing SAML responses containing
+    multiple Assertion elements.
+cves:
+  - CVE-2022-41912
+ghsas:
+  - GHSA-j2jp-wvqg-wc2g
+credit: Felix Wilhelm from Google Project Zero
+references:
+  - advisory: https://github.com/prometheus/exporter-toolkit/security/advisories/GHSA-7rg2-cxvp-9p7p
+  - fix: https://github.com/crewjam/saml/commit/aee3fb1edeeaf1088fcb458727e0fd863d277f8b