Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

spring-projects/spring-security-saml

              main @ 397da3e
            

Fixes

CVEs

HIGH

Peak severity

45.5%

Coverage

Highlights

Auth Bypass: 8 prior fixes. Scrutinize any change in this area.

sample/src/main/webapp/WEB-INF/securityContext.xml: most-fixed (4 issues). Treat as high-risk during review.

7 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Accepting unverified assertions allows attackers to inject arbitrary attributes or forge identities, completely bypassing SAML authentication. Implementing rigorous validation that restricts attributes to those in verified Subject assertions is critical.

Auth Bypass: Misconfigured URL interceptors or filter order issues can leave administration endpoints completely exposed or allow bypassing CSRF and authentication rules by executing operations before filters process the request.

XML External Entity (XXE): SAML relies heavily on XML parsing. Custom configurations on ParserPool beans that override safe parser defaults can unintentionally re-enable dangerous external entity resolution.