What’s Vulnerable › Vulnerabilities

CVE-2023-34923

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-06-22 · updated 2026-06-17
• Weakness: CWE-863

Description

XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation.

Affected products

• Topdesk: 12.10.12

References

• https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks
• https://my.topdesk.com/tas/public/ssp/content/detail/knowledgeitem?unid=56a16ba1c2824e9a82655892ba75d3c0
• https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks
• https://my.topdesk.com/tas/public/ssp/content/detail/knowledgeitem?unid=56a16ba1c2824e9a82655892ba75d3c0

Get alerted when CVE-2023-34923 or the next vulnerability affects your stack