CVE-2021-21239

This repository contains a functional PoC for CVE-2021-21239, an XML signature validation bypass vulnerability in xmlsec. The script manipulates XML input to exploit the flaw and signs it using a provided RSA key.

The repository contains a functional exploit for CVE-2021-21239, a SAML signature validation bypass in Redash <=10.1.0. The exploit forges a SAML response with an embedded public key to impersonate users and escalate privileges via JIT provisioning.

This repository contains a functional exploit for CVE-2021-21239, an authentication bypass vulnerability in Redash due to improper SAML signature validation in pysaml2. The PoC includes a Dockerized vulnerable Redash instance and a Python script to forge SAML responses with embedded RSA keys.

This repository contains a functional exploit for CVE-2021-21239, which manipulates SAML assertions by replacing attribute values and signature blocks to bypass authentication. The script automates the process of generating a malicious SAML response file.