The Fragile Lock: Novel Bypasses For SAML Authentication

2025-12-10来源 PortSwigger ResearchEnglish
TLDR This post shows how to achieve a full authentication bypass in the Ruby and PHP SAML ecosystem by exploiting several parser-level inconsistencies: including attribute pollution, namespace confusi

原文：https://www.a8q9.cn/en/article/the-fragile-lock-nbsp-novel-bypasses-for-saml-authentication-1f81b8.html

相关文章