SAML roulette: the hacker always wins
Introduction In this post, we’ll show precisely how to chain round-trip attacks and namespace confusion to achieve unauthenticated admin access on GitLab Enterprise by exploiting the ruby-saml library
原文：https://www.a8q9.cn/en/article/saml-roulette-the-hacker-always-wins-20b5eb.html