general
Blog post
The Fragile Lock: Novel Bypasses For SAML Authentication
Source: PortSwigger Research · Published · Last checked 5 seconds ago ·
Publisher excerpt From PortSwigger Research
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi
Excerpt only, shown with attribution. This content belongs to the original publisher and has not been independently verified by CyberSecurity.pk.
Reference: PortSwigger Research — portswigger.net ↗