GO-2025-3505: Fleet has SAML authentication vulnerability due to improper SAML response validation in github.com/fleetdm/fleet

fleet

module

v4.43.4 Latest Latest Go to latest Published: Jan 25, 2024 License: UNKNOWN not legal advice

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/fleetdm/fleet

Links

Open Source Insights

Directories ¶

Path	Synopsis
cmd
cpe command
cve command
fleet command
fleetctl command
macoffice command
msrc command
osquery-perf command
ee
fleetctl
fleetd-chrome command
server/licensing
server/service
server/webhooks
tools/mdm command
orbit
cmd/desktop command
cmd/fleetd_tables command
cmd/orbit command
pkg/augeas
pkg/bitlocker
pkg/build
pkg/constant
pkg/cryptoinfo
pkg/dataflatten
pkg/execuser
pkg/insecure
pkg/keystore
pkg/logging
pkg/osquery
pkg/osservice
pkg/packaging
pkg/packaging/wix
pkg/platform
pkg/process
pkg/profiles
pkg/scripts
pkg/table
pkg/table/app-icons
pkg/table/authdb
pkg/table/cis_audit
pkg/table/common
pkg/table/crowdstrike/falcon_kernel_check
pkg/table/crowdstrike/falconctl
pkg/table/cryptoinfotable
pkg/table/cryptsetup
pkg/table/csrutil_info
pkg/table/dataflattentable
pkg/table/diskutil/apfs
pkg/table/diskutil/corestorage
pkg/table/dscl
pkg/table/filevault_prk
pkg/table/filevault_status
pkg/table/find_cmd
pkg/table/firefox_preferences
pkg/table/firmware_eficheck_integrity_check
pkg/table/firmwarepasswd
pkg/table/ioreg
pkg/table/mdm
pkg/table/nvram_info
pkg/table/orbit_info
pkg/table/pmset
pkg/table/privaterelay
pkg/table/pwd_policy
pkg/table/sntp_request
pkg/table/software_update
pkg/table/sudo_info
pkg/table/tablehelpers
pkg/table/user_login_settings
pkg/table/windowsupdatetable
pkg/token
pkg/update
pkg/update/badgerstore
pkg/update/filestore
pkg/user
pkg/useraction
pkg/windows/oleconv
pkg/windows/windowsupdate
tools/build command
pkg
buildpkg
certificate
download
file
fleethttp
mdm/mdmtest
nettest
open
optjson
rawjson
retry
scripts
secure
spec
server
authz
bindata
config
contexts/authz
contexts/capabilities
contexts/ctxdb
contexts/ctxerr
contexts/host
contexts/license
contexts/logging
contexts/publicip
contexts/token
contexts/viewer
datastore/cached_mysql
datastore/mysql
datastore/mysql/migrations/data
datastore/mysql/migrations/tables
datastore/mysqlredis
datastore/redis
datastore/redis/redistest
datastore/s3
errorstore
fleet
fleet/policytest
goose
goose/cmd/goose command
health
launcher
live_query
live_query/live_query_mock
logging
logging/mock
mail
mdm
mdm/apple
mdm/apple/appmanifest
mdm/apple/mobileconfig
mdm/internal/commonmdm
mdm/microsoft
mdm/microsoft/syncml
mdm/nanomdm/certverify
mdm/nanomdm/cli
mdm/nanomdm/cmd/nano2nano command
mdm/nanomdm/cmd/nanomdm command
mdm/nanomdm/cryptoutil
mdm/nanomdm/http
mdm/nanomdm/http/api
mdm/nanomdm/http/mdm
mdm/nanomdm/log
mdm/nanomdm/log/ctxlog
mdm/nanomdm/log/stdlogfmt
mdm/nanomdm/mdm
mdm/nanomdm/push
mdm/nanomdm/push/buford
mdm/nanomdm/push/service
mdm/nanomdm/service
mdm/nanomdm/service/certauth
mdm/nanomdm/service/dump
mdm/nanomdm/service/microwebhook
mdm/nanomdm/service/multi
mdm/nanomdm/service/nanomdm
mdm/nanomdm/storage
mdm/nanomdm/storage/allmulti
mdm/nanomdm/storage/file
mdm/nanomdm/storage/internal/test
mdm/nanomdm/storage/mysql
mdm/nanomdm/storage/pgsql
mock
mock/mockimpl command
mock/mockresult
mock/nanodep
mock/nanomdm
mock/scep
policies
ptr
pubsub
service
service/async
service/externalsvc
service/middleware/authzcheck
service/middleware/mdmconfigured
service/middleware/ratelimit
service/mock
service/osquery_utils
service/redis_policy_set
service/schedule
sso
test
version
vulnerabilities/io
vulnerabilities/macoffice
vulnerabilities/msrc
vulnerabilities/msrc/parsed
vulnerabilities/msrc/xml
vulnerabilities/nvd
vulnerabilities/nvd/sync
vulnerabilities/oval
vulnerabilities/oval/input
vulnerabilities/oval/parsed
vulnerabilities/utils
webhooks
websocket
worker
tools
cloner-check command
dbutils command
desktop command
file-server command
inspect-cert command
installerstore command
jira-integration command
loadtest/fleetd_labels command
mdm/apple/appmanifest command
mdm/apple/getaccount command
mdm/apple/loadtest command
mdm/migration/echo command
mdm/migration/kandji command
mdm/windows/programmatic-enrollment
nvd/nvdvuln command
osquery-agent-options command
redis-stress command
redis-tests command
run-scripts command
seed_data command
test_extensions/hello_world command
tuf/status command
windows-mdm-enroll command
zendesk-integration command

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL