Denial of Service Vulnerability in Entr'ouvert Lasso Product
CVE-2025-46404

7.5HIGH

Key Information:

Vendor: Entr'ouvert
Status: Lasso
Vendor: CVE Published:; 5 November 2025

🔔 Create Entr'ouvert Vulnerability Alert

What is CVE-2025-46404?

A vulnerability in the processing of SAML responses in Entr'ouvert Lasso version 2.5.1 can lead to denial of service. An attacker can exploit this flaw by sending a specially crafted SAML response, which can disrupt the service, affecting the availability of the application. Proper validation of SAML signatures is crucial to safeguard against this type of attack.

Affected Version(s)

Lasso 2.5.1

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:

7.5

Severity:

HIGH

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Nov 5, 2025
Vulnerability Reserved
May 7, 2025

Credit

Discovered by Keane O'Kelley of and another member of Cisco Advanced Security Initiative Group

JSON