CVE-2025-25293: omniauth omniauth_saml Uncontrolled Resource Consumption
Vulnerability summary
CVE-2025-25293 is a high (CVSS 7.7) Uncontrolled Resource Consumption vulnerability in omniauth omniauth_saml. EPSS estimates a 1.53% chance of exploitation in the next 30 days, higher than 74.3% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 2 · Related 2Timeline
- 12-03-2025PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.
CVSS metrics
8 scores · 5 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.7HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:PDiffers
- OSV · RubygemsEcosystem advisory · calculated8.7HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:PDiffers
- NVDNIST7.7HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · RubygemsEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.53%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
+0.03 pp
From 1.50% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundGhsl 2024 355 Ruby Saml
Maturity: poc
Exploit Reference (github.blog)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Debian1 product
- ruby-samlAll versions (No fix recorded)
Omniauth1 product
- omniauth_saml< 1.10.6 | ≥ 2.0.0, < 2.1.3 | ≥ 2.2.0, < 2.2.3
Onelogin1 product
- ruby-saml< 1.12.4 | ≥ 1.13.0, < 1.18.0
RubyGems1 product
- ruby-saml< 1.12.4 | ≥ 1.13.0, < 1.18.0
Saml-toolkits1 product
- ruby-saml< 1.12.4 | ≥ 1.13.0, < 1.18.0
Ubuntu1 product
- ruby-saml< 1.1.2-1ubuntu1+esm2 | < 1.7.2-1ubuntu0.1~esm2 | < 1.11.0-1ubuntu0.1+esm1 | < 1.13.0-1ubuntu0.1+esm1 | < 1.15.0-1ubuntu0.24.04.1+esm1
6 vendors · 6 products
References
19 links- github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-92rq-c8cf-prrqX Refsource CONFIRMREPORTWEBVendor Advisory
- github.com/omniauth/omniauth-saml/security/advisories/GHSA-hw46-3hmr-x9xvX Refsource MISCREPORTWEBVendor Advisory
- github.com/SAML-Toolkits/ruby-saml/commit/acac9e9cc0b9a507882c614f25d41f8b47be349aX Refsource MISCREPORTWEBPatch
- github.com/SAML-Toolkits/ruby-saml/commit/e2da4c6dae7dc01a4d9cd221395140a67e2b3eb1X Refsource MISCREPORTWEBPatch
- about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-releasedX Refsource MISCREPORTWEBPatch
- github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentialsX Refsource MISCREPORTWEBExploitThird Party Advisory
- securitylab.github.com/advisories/GHSL-2024-355_ruby-samlX Refsource MISCAdvisoryExploitThird Party Advisory
- security.netapp.com/advisory/ntap-20250314-0008/Third Party Advisory
