CVE-2022-45597

ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. NOTE: the vendor does not consider this a vulnerability because the report is only about use of certificates at the application layer (not the transport layer) and "Certificates are exchanged in a controlled fashion between entities within a trust relationship. This is why self-signed certificates may be used and why validating certificates isn’t as important as doing so for the transport layer certificates."

• CWE-295

• https://www.componentspace.com/documentation/saml-for-asp-net-core/ComponentSpace%20SAML%20for%20ASP.NET%20Core%20Release%20Notes.pdfRelease Notes
• https://www.componentspace.com/documentation/saml-for-asp-net-core/ComponentSpace%20SAML%20for%20ASP.NET%20Core%20Release%20Notes.pdfRelease Notes

Published

Mar 24, 2023

Last Modified

Jul 9, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-45582Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 …6.1
• CVE-2022-45586Stack overflow vulnerability in function Dict::find in xpdf/…5.5
• CVE-2022-45587Stack overflow vulnerability in function gmalloc in goo/gmem…5.5
• CVE-2022-45588All versions before R2022-09 of Talend's Remote Engine Gen 2…7.8
• CVE-2022-45589All versions before 8.0.1-R2022-10-RT and 7.3.1-R2022-09-RT …7.2
• CVE-2022-4559A vulnerability was found in INEX IPX-Manager up to 6.2.0. I…6.1
• CVE-2022-45598Cross Site Scripting vulnerability in Joplin Desktop App bef…6.1
• CVE-2022-45599Aztech WMB250AC Mesh Routers Firmware Version 016 2020 is vu…9.8
• CVE-2022-4560A vulnerability was found in Joget up to 7.0.31. It has been…6.1
• CVE-2022-45600Aztech WMB250AC Mesh Routers Firmware Version 016 2020 devic…8.8
• CVE-2022-45608An issue was discovered in ThingsBoard 3.4.1, allows low pri…8.8
• CVE-2022-4561A vulnerability classified as problematic has been found in …6.1