(github.blog)

312 points campuscodi | 1 comments | 15 Mar 25 19:06 UTC | HN request time: 0.23s | source

1. derektank ◴[15 Mar 25 19:26 UTC] No.43374627[source]▶

>We discovered an exploitable instance of this vulnerability in GitLab, and have notified their security team

GitLab has released a fix on their end for anyone else wondering

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials