← All advisories

High severity7.5NVD Advisory· Published Jan 23, 2017· Updated Jun 17, 2026

CVE-2016-5697

CVE-2016-5697

Description

Ruby-saml before 1.3.0 allows attackers to perform XML signature wrapping attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
ruby-samlRubyGems	< 1.3.0	1.3.0

Affected products

2

Onelogin/Ruby SAML
cpe:2.3:a:onelogin:ruby-saml:*:*:*:*:*:*:*:*
Range: <=1.2.0
ghsa-coords
pkg:gem/ruby-saml
Range: < 1.3.0

Patches

Vulnerability mechanics

References

5

www.openwall.com/lists/oss-security/2016/06/24/3nvdMailing ListPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-36p7-xjw8-h6f2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2016-5697ghsaADVISORY
github.com/onelogin/ruby-saml/commit/a571f52171e6bfd87db59822d1d9e8c38fb3b995ghsaWEB
github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2016-5697.ymlghsaWEB

News mentions

0

No linked articles in our index yet.