Researchers Detail Ruby-SAML/GitLab Flaw (CVE-2024-45409) Allows SAML Authentication Bypass

This flaw, tracked as CVE-2024-45409, in the Ruby-SAML and OmniAuth-SAML libraries used by GitLab enables malicious actors to gain unauthorized access by manipulating SAML response verification.