FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    SAML CVE announcement

    Scheduled Pinned Locked Moved
    Announcements
    1
    1
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • danD
      dan
      last edited by dan

      If you are running a version of FusionAuth prior to 1.16.0 AND using SAML, you should upgrade ASAP.

      More details:

      • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12676
      • https://compass-security.com/fileadmin/Research/Advisories/2020-06_CSNC-2020-002_FusionAuth_Signature_Exclusion_Attack.txt

      --
      FusionAuth - Auth for devs, built by devs.
      https://fusionauth.io

      1 Reply Last reply Reply Quote 0
      • First post
        Last post