What’s Vulnerable › Vulnerabilities

CVE-2025-31335

• Severity: medium (CVSS 4.0 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-03-28 · updated 2026-06-17
• Weakness: CWE-347

Description

The OpenSAML C++ library before 3.3.1 allows forging of signed SAML messages via parameter manipulation (when using SAML bindings that rely on non-XML signatures).

Affected products

• Shibboleth OpenSAML C++ library: before 3.3.1 — fixed in 3.3.1

How to fix

Upgrade to a fixed version: Shibboleth OpenSAML C++ library 3.3.1. Check the vendor advisory for mitigations.

References

• https://git.shibboleth.net/view/?p=cpp-opensaml.git;a=commit;h=22a610b322e2178abd03e97cdbc8fb50b45efaee
• https://lists.debian.org/debian-security-announce/2025/msg00041.html
• https://shibboleth.atlassian.net/browse/CPPOST-126
• https://shibboleth.net/community/advisories/secadv_20250313.txt

Get alerted when CVE-2025-31335 or the next vulnerability affects your stack