SAML Attribute Smuggling Vulnerability Allowing User Impersonation in Passport-WS-Fed CVE-2025-46573 - May 6, 2025

Description

This Passport-WS-Fed vulnerability allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done by adding attributes to the response.

Affected versions

You are affected if you are using passport-wsfed-saml2version 4.5.1 or below, specifically under the following conditions:

The service provider is using passport-wsfed-saml2
A valid SAML Response signed by the Identity Provider can be obtained.

Fix

Upgrade to version 4.6.4 or greater.

CVE details

CVE ID	CVE-2025-46573
Published Date	2025-05-06
Vulnerability Type	SAML Attribute Smuggling
CWE	CWE-345 - Insufficient Verification of Data Authenticity
CVSS v4	Score: 8.6 Vector string: https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

SAML Attribute Smuggling Vulnerability Allowing User Impersonation