XML Signature Wrapping Attack
A classic attack technique targeting the SAML protocol that exploits semantic ambiguity between node references and actual processing paths in XML documents. It enables injection of forged identity assertions without invalidating the existing signature.
Timeline (last 90 days)
Similar historical cases include the Duo Labs SAML vulnerabilities disclosed in 2018 (involving XML comments and namespace confusion), the GitHub Enterprise SAML bypass, and the earlier XML Signature Wrapping (XSW) attack.
The core technique of XSW is to retain the legitimate signed node while inserting a structurally similar forged node in a different position, inducing the business code to read the latter.
All Facts (2)
Similar historical cases include the Duo Labs SAML vulnerabilities disclosed in 2018 (involving XML comments and namespace confusion), the GitHub Enterprise SAML bypass, and the earlier XML Signature Wrapping (XSW) attack.
50%UnverifiedThe core technique of XSW is to retain the legitimate signed node while inserting a structurally similar forged node in a different position, inducing the business code to read the latter.
50%