← CVE Intelligence

CVE-2025-47151

Entr'ouvert / Lasso PUBLISHED

Description (CNA)

A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
Entr'ouvert / Lassoaffected 2.5.1; affected 2.8.2

CWE

CWE-843

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.