← CVE Intelligence

CVE-2025-46784

Entr'ouvert / Lasso PUBLISHED

Description (CNA)

A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Entr'ouvert / Lassoaffected 2.5.1

CWE

CWE-401

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.