OpenSAML
A widely used open-source SAML protocol implementation library in the Java ecosystem, providing construction, parsing and signature verification of SAML messages, with built-in protection against XML signature wrapping attacks.
Timeline (last 90 days)
OpenSAML and Spring Security SAML in the Java ecosystem, and ITfoxtec or Sustainsys.Saml2 in .NET, all have built-in protections against XSW.
After XSW attacks were systematically studied around 2012, researchers discovered variant vulnerabilities in several mainstream SAML implementations including Shibboleth and OpenSAML.
All Facts (2)
OpenSAML and Spring Security SAML in the Java ecosystem, and ITfoxtec or Sustainsys.Saml2 in .NET, all have built-in protections against XSW.
50%UnverifiedAfter XSW attacks were systematically studied around 2012, researchers discovered variant vulnerabilities in several mainstream SAML implementations including Shibboleth and OpenSAML.
50%