←back to thread

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials

(github.blog)
312 points campuscodi | 1 comments | 15 Mar 25 19:06 UTC | HN request time: 0.205s | source
1. layer8 ◴[16 Mar 25 00:23 UTC] No.43376085[source]▶
This is an example of a parser mismatch vulnerability.

Related submission a year ago: https://news.ycombinator.com/item?id=38743029