CVE-2025-47151
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to arbitrary code execution.
Risk Assessment
An attacker can send a malicious SAML response to execute arbitrary code in the context of the application using Lasso, potentially leading to system compromise.
Recommendation
Update Lasso to the latest patched version. Validate SAML responses before processing.
Other vulnerabilities in Entr'ouvert Lasso
See all- CVE-2025-46784High
A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
- CVE-2025-46705High
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML assertion response can lead to a denial of service.
- CVE-2025-46404High
A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
Original NVD description (English source)
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS