{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-003108.html",
  "dc:date": "2024-04-22T17:28+09:00",
  "dcterms:issued": "2024-04-22T17:28+09:00",
  "dcterms:modified": "2024-04-22T17:28+09:00",
  "description": "Armeria-saml provided by LY Corporation contains an issue in handling SAML messages (CWE-304, CVE-2024-1735).\r\n\r\nLY Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.",
  "link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-003108.html",
  "sec:cpe": {
    "#text": "cpe:/a:linecorp:armeria-saml",
    "@product": "Armeria-saml",
    "@vendor": "LY Corporation",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "9.1",
    "@severity": "Critical",
    "@type": "Base",
    "@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
    "@version": "3.0"
  },
  "sec:identifier": "JVNDB-2024-003108",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/vu/JVNVU91216202/index.html",
      "@id": "JVNVU#91216202",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2024-1735",
      "@id": "CVE-2024-1735",
      "@source": "CVE"
    },
    {
      "#text": "https://cwe.mitre.org/data/definitions/304.html",
      "@id": "CWE-304",
      "@title": "Missing Critical Step in Authentication(CWE-304)"
    }
  ],
  "title": "Armeria-saml improperly handles SAML messages"
}