CVE-2025-31335

{"id": "CVE-2025-31335", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.0, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2025-03-28T06:15:34.723", "references": [{"url": "https://git.shibboleth.net/view/?p=cpp-opensaml.git;a=commit;h=22a610b322e2178abd03e97cdbc8fb50b45efaee", "source": "cve@mitre.org"}, {"url": "https://lists.debian.org/debian-security-announce/2025/msg00041.html", "source": "cve@mitre.org"}, {"url": "https://shibboleth.atlassian.net/browse/CPPOST-126", "source": "cve@mitre.org"}, {"url": "https://shibboleth.net/community/advisories/secadv_20250313.txt", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures)."}, {"lang": "es", "value": "OpenSAML C++ library anterior a la versi\u00f3n 3.3.1 permite la falsificaci\u00f3n de mensajes SAML firmados a trav\u00e9s de la manipulaci\u00f3n de par\u00e1metros (cuando se utilizan enlaces SAML que dependen de firmas que no son XML)."}], "lastModified": "2026-04-15T00:35:42.020", "sourceIdentifier": "cve@mitre.org"}