← CVE Intelligence

CVE-2025-46404

Entr'ouvert / Lasso PUBLISHED

Description (CNA)

A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Entr'ouvert / Lassoaffected 2.5.1

CWE

CWE-476

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.