CVE-2025-9943: Unauthenticated SQL Injection Vulnerability in Shibboleth Service Provider
An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider (SP) is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing for the extraction of arbitrary data from the database, if the database connection is configured to use the ODBC plugin. The vulnerability arises from insufficient escaping of single quotes in the class SQLString (file odbc-store.cpp, lines 253-271).
This issue affects Shibboleth Service Provider through 3.5.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-9943?
CVE-2025-9943 has been classified with high severity due to the potential for unauthenticated SQL injection attacks.
How do I fix CVE-2025-9943?
To fix CVE-2025-9943, upgrade the Shibboleth Service Provider to version 3.5.1 or later.
What systems are affected by CVE-2025-9943?
CVE-2025-9943 affects Shibboleth Service Provider versions earlier than 3.5.1 utilizing an SQL database for the replay cache.
Can CVE-2025-9943 be exploited remotely?
Yes, CVE-2025-9943 can be exploited remotely by an unauthenticated attacker.
What type of vulnerability is CVE-2025-9943?
CVE-2025-9943 is an SQL injection vulnerability specifically related to the "ID" attribute in the SAML response.