SAML ROULETTE: THE HACKER ALWAYS WINS

Summary from the TLDR InfoSec newsletter

This blog explores how to exploit GitLab Enterprise through ruby-saml vulnerabilities using round-trip attacks and namespace confusion for unauthorized admin access. The technical details are provided for security education and understanding these attack vectors.