PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.
← Back | CVE Intelligence Hub

CVE-2024-45409

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2024-45409.

Coverage Span
2024-10-04
Reports
1 related reports

Associated Reports & Timeline

1.
Ruby-SAML / GitLab Authentication Bypass (CVE-2024-45409)
projectdiscovery.io | vulnerability | | Original ↗ | .md | #bug-bounty
Introduction In this blog post, we will analyze CVE-2024-45409, a critical vulnerability impacting Ruby-SAML, OmniAuth-SAML libraries, which effectively affects GitLab. This vulnerability allows an attacker to bypass SAML authentication mechanisms and gain unauthorized access by exploiting a flaw in how SAML responses are handled. The issue arises due to weaknesses in the verification of the digital signature used to protect SAML assertions, allowing attackers to manipulate the SAML response a