Denial of Service Vulnerability in Entr'ouvert Lasso Product
CVE-2025-46404

9.6CRITICAL

Key Information:

Vendor

Entr'ouvert

Status
Lasso
Vendor
CVE Published:
5 November 2025

What is CVE-2025-46404?

A vulnerability in the processing of SAML responses in Entr'ouvert Lasso version 2.5.1 can lead to denial of service. An attacker can exploit this flaw by sending a specially crafted SAML response, which can disrupt the service, affecting the availability of the application. Proper validation of SAML signatures is crucial to safeguard against this type of attack.

Affected Version(s)

Lasso 2.5.1

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Keane O'Kelley of and another member of Cisco Advanced Security Initiative Group
JSON
.
CVE-2025-46404 : Denial of Service Vulnerability in Entr'ouvert Lasso Product