CVE-2023-45683

github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the ACS Location URI according to the SAML binding being parsed. If abused, this flaw allows attackers to register malicious Service Providers at the IdP and inject Javascript in the ACS endpoint definition, achieving Cross-Site-Scripting (XSS) in the IdP context during the redirection at the end of a SAML SSO Flow. Consequently, an attacker may perform any authenticated action as the victim once the victim’s browser loaded the SAML IdP initiated SSO link for the malicious service provider. Note: SP registration is commonly an unrestricted operation in IdPs, hence not requiring particular permissions or publicly accessible to ease the IdP interoperability. This issue is fixed in version 0.4.14. Users unable to upgrade may perform external validation of URLs provided in SAML metadata, or restrict the ability for end-users to upload arbitrary metadata.

• CWE-79

• https://github.com/crewjam/saml/commit/b07b16cf83c4171d16da4d85608cb827f183cd79Patch
• https://github.com/crewjam/saml/security/advisories/GHSA-267v-3v32-g6q5Vendor Advisory
• https://github.com/crewjam/saml/commit/b07b16cf83c4171d16da4d85608cb827f183cd79Patch
• https://github.com/crewjam/saml/security/advisories/GHSA-267v-3v32-g6q5Vendor Advisory

Published

Oct 16, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45678stb_vorbis is a single file MIT licensed library for process…7.8
• CVE-2023-45679stb_vorbis is a single file MIT licensed library for process…7.8
• CVE-2023-4568PaperCut NG allows for unauthenticated XMLRPC commands to be…6.5
• CVE-2023-45680stb_vorbis is a single file MIT licensed library for process…5.5
• CVE-2023-45681stb_vorbis is a single file MIT licensed library for process…7.8
• CVE-2023-45682stb_vorbis is a single file MIT licensed library for process…7.1
• CVE-2023-45684Northern.tech CFEngine Enterprise before 3.21.3 allows SQL I…7.5
• CVE-2023-45685Insufficient path validation when extracting a zip archive i…9.1
• CVE-2023-45686Insufficient path validation when writing a file via WebDAV …7.2
• CVE-2023-45687A session fixation vulnerability in South River Technologies…8.8
• CVE-2023-45688Lack of sufficient path validation in South River Technologi…4.3
• CVE-2023-45689Lack of sufficient path validation in South River Technologi…6.5