CVE-2023-23903 (cmc, guardian)

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error.

The whole application in rendered unusable until a console intervention.

application configuration console cve error file guardian request return saml upload wrong