Auth0 Passport Wsfed Saml2
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Auth0 Passport Wsfed Saml2.
By the Year
In 2026 there have been 0 vulnerabilities in Auth0 Passport Wsfed Saml2. Passport Wsfed Saml2 did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 0 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 1 | 7.50 |
It may take a day or so for new Passport Wsfed Saml2 vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Auth0 Passport Wsfed Saml2 Security Vulnerabilities
Remote Auth Bypass in Passport-wsfed-saml2 <4.6.3 (WSFed)
CVE-2022-23505
7.5 - High
- December 13, 2022
Passport-wsfed-saml2 is a ws-federation protocol and SAML2 tokens authentication provider for Passport. In versions prior to 4.6.3, a remote attacker may be able to bypass WSFed authentication on a website using passport-wsfed-saml2. A successful attack requires that the attacker is in possession of an arbitrary IDP signed assertion. Depending on the IDP used, fully unauthenticated attacks (e.g without access to a valid user) might also be feasible if generation of a signed message can be triggered. This issue is patched in version 4.6.3. Use of SAML2 authentication instead of WSFed is a workaround.
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Auth0 Passport Wsfed Saml2 or by Auth0? Click the Watch button to subscribe.
