Subscribe via feed.

crewjam/saml Signature Bypass

Posted by deepcore on January 3, 2023 – 10:02 pm

The crewjam/saml go library is vulnerable to an authentication bypass when processing SAML responses containing multiple Assertion elements.


This post is under “exploit” and has no respond so far.
If you enjoy this article, make sure you subscribe to my RSS Feed.

Post a reply

You must be logged in to post a comment.