XML Signature Wrapping (XSW) Vulnerability in TOPdesk v12.10.12 SAML-based Single Sign-on

CVE-2023-34923

XML Signature Wrapping (XSW) in SAML-based Single Sign-on feature in TOPdesk v12.10.12 allows bad actors with credentials to authenticate with the Identity Provider (IP) to impersonate any TOPdesk user via SAML Response manipulation.

Learn more about our User Device Pen Test.