XML Signature Wrapping (XSW)

High Severity Technical Guide

Vulnerability Description

XSW vulnerabilities affect XML-based single-sign-on protocols (like SAML). An attacker alters the XML structure to wrap the signature, tricking the validation logic while changing assertions.

Remediation Guide

To resolve this vulnerability, follow these config changes or developer practices:

Enforce strict schema validation on SAML assertions and verify that signatures are bound to the specific elements being consumed by the application.

Verify Your Fix

After applying the remediation, run an external attack-surface scan to verify that the vulnerability is no longer detected by WebScanify.

Is your website vulnerable?

Run a free security scan now to identify missing headers, outdated JS, and other deployment vulnerabilities.