CYBERSECURITY
FEATURED ANALYSIS
The Fragile Lock: Novel Bypasses For SAML Authentication
SOURCE
PortSwigger Research
DATE
READ
1 min read
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi