High severity8.1NVD Advisory· Published Jun 22, 2023· Updated Jun 17, 2026

CVE-2023-34923

Description

XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Topdesk/Topdesk3 versions
cpe:2.3:a:topdesk:topdesk:12.10.12:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:topdesk:topdesk:12.10.12:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =12.10.12

Patches

Vulnerability mechanics

References

char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacksnvdExploitTechnical DescriptionThird Party Advisory
my.topdesk.com/tas/public/ssp/content/detail/knowledgeitemnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000