CVE-2024-47832

CVE-2024-47832 is a critical XML signature bypass vulnerability affecting self-hosted instances of SSOReady, a Docker-based single sign-on provider. This flaw allows an attacker with access to certain IDP-signed messages to bypass signature validation due to differential XML parser behavior. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. There are no known workarounds, and while no public exploits or active exploitation have been confirmed, the vulnerability has garnered significant community discussion.