CVE-2025-54572 - CVE House

Back to Database

Status published Medium CVE-2025-54572

Ruby SAML DOS vulnerability with large SAML response

6.9 CVSS

Vulnerability Description

The Ruby SAML library is for implementing the client side of a SAML authorization. In versions 1.18.0 and below, a denial-of-service vulnerability exists in ruby-saml even with the message_max_bytesize setting configured. The vulnerability occurs because the SAML response is validated for Base64 format prior to checking the message size, leading to potential resource exhaustion. This is fixed in version 1.18.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-54572

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SAML-Toolkits

View All →

ruby-saml Libxml2 Canonicalization errors can bypass Digest/Signature validation

ruby-saml has a SAML authentication bypass due to namespace handling (parser differential)

ruby-saml vulnerable to Remote Denial of Service (DoS) with compressed SAML responses

Ruby SAML vulnerable to SAML authentication bypass due to namespace handling (parser differential)

ruby-saml vulnerable to SAML authentication bypass due to DOCTYPE handling (parser differential)

Affected Vendor

SAML-Toolkits

View all reports →

Affected Software

ruby-saml

Vulnerable Versions:

< 1.18.1

Timeline

Official Publish: July 30th, 2025

Last Modified: November 3rd, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-400 CWE-770

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service

T1498 Network Denial of Service

T1190 Exploit Public-Facing Application

T1562 Impair Defenses

Defense Evasion

T1046 Network Service Discovery