ruby-saml auth bypass in gitlab - SERP Analysis

https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/

https://projectdiscovery.io/blog/ruby-saml-gitlab-auth-bypass

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2025-25291/

https://cert.europa.eu/publications/security-advisories/2024-101/

https://www.darkreading.com/application-security/gitlab-warns-max-severity-authentication-bypass-bug

https://gitlab.com/gitlab-org/gitlab/-/issues/486565

https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/

https://www.bleepingcomputer.com/news/security/gitlab-patches-critical-authentication-bypass-vulnerabilities/

https://github.com/synacktiv/CVE-2024-45409

https://thehackernews.com/2024/09/gitlab-patches-critical-saml.html

https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass

https://www.helpnetsecurity.com/2024/10/09/exploit-cve-2024-45409/

https://smartermsp.com/cybersecurity-threat-advisory-new-critical-gitlab-saml-vulnerability/

https://advisories.gitlab.com/pkg/gem/ruby-saml/

https://portswigger.net/research/saml-roulette-the-hacker-always-wins

https://www.securityweek.com/gitlab-patches-critical-authentication-bypass-vulnerability/

https://soc.cyber.wa.gov.au/advisories/20241008001-GitLab-Critical-SAML-Vulnerability/

https://www.linkedin.com/posts/caturegli_ruby-saml-gitlab-authentication-bypass-activity-7249876282170044418-nFY8

https://workos.com/blog/ruby-saml-cve-2024-45409

https://foresiet.com/blog/gitlab-patches-critical-saml-authentication-flaw-protect-your-systems-from-exploitation

https://csirt.egi.eu/2024/10/14/critical-risk-saml-authentication-bypass-flaw/

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2024-45409/

https://cyble.com/blog/active-exploitation-of-saml-vulnerability-cve-2024-45409/

https://vulnera.com/newswire/gitlab-issues-security-updates-for-critical-saml-authentication-bypass-vulnerability/

https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2

https://vulert.com/vuln-db/bitnami-gitlab-185835

https://x.com/Synacktiv/status/1843257946236674404

https://www.bleepingcomputer.com/news/security/gitlab-releases-fix-for-critical-saml-authentication-bypass-flaw/

https://docs.gitlab.com/integration/saml/

https://www.linkedin.com/posts/cybercureme_ruby-saml-gitlab-authentication-bypass-activity-7249063774035341314-PT9f

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2025-25293/

https://twitter.com/pdiscoveryio/status/1842347643353067814

https://www.reddit.com/r/pwnhub/comments/1jaf6uu/gitlab_issues_urgent_security_warning_over/

https://gitlab.com/gitlab-org/gitlab-foss/-/blob/v14.9.3/doc/integration/saml.md

https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html

https://threatprotect.qualys.com/2024/09/19/gitlab-addressed-authentication-bypass-vulnerability-in-community-edition-ce-and-enterprise-edition-ee-cve-2024-45409/

https://www.reddit.com/r/blueteamsec/comments/1fwvlky/rubysaml_gitlab_authentication_bypass_cve202445409/

https://gitlab.com/gitlab-org/gitlab/-/blob/c2e4320b94f7984b38c563bc77fffe4247fc9cb2/doc/integration/saml.md

https://osv.dev/vulnerability/BIT-gitlab-2025-25292

https://docs.gitlab.com/user/group/saml_sso/

https://www.threads.com/%40gregxsunday/post/DBybLOFob1Z

https://threatprotect.qualys.com/2025/03/13/gitlab-addressed-critical-authentication-bypass-vulnerabilities-cve-2025-25291-cve-2025-25292/

https://www.scworld.com/news/gitlab-fixes-critical-sso-bypass-vulnerabilities-in-update

https://hackyboiz.github.io/2024/10/19/mungsul/2024-10-19/

https://securityboulevard.com/2024/10/gitlab-patches-severe-saml-authentication-bypass-flaw-fixed/

https://medium.com/%40navedsaxena16/gitlab-addresses-critical-saml-authentication-bypass-vulnerability-in-ce-and-ee-editions-0829a2a88946

https://m.facebook.com/story.php?story_fbid=960628336267274&id=100069603490878

https://app.daily.dev/posts/critical-saml-authentication-bypass-vulnerability-cve-2024-45409-in-ruby-saml-and-gitlab-ic1tazybn

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2017-11428/

https://bsky.app/profile/bleepingcomputer.com/post/3lkbihvgqav2t

https://www.cybersecurity-help.cz/vdb/SB2024091807

https://vulert.com/vuln-db/CVE-2025-25292

https://securityonline.info/researchers-detail-ruby-saml-gitlab-flaw-cve-2024-45409-allows-saml-authentication-bypass/

https://www.tenable.com/cve/CVE-2024-45409

https://secalerts.co/vulnerability/CVE-2024-45409

https://latesthackingnews.com/2024/09/21/gitlab-addressed-critical-saml-auth-flaw-with-the-latest-release/

https://sploitus.com/exploit?id=47E14B22-1DD1-5BEB-8127-3235F7EAE5BF

https://cybersecuritynews.com/gitlab-authentication-bypass-vulnerability/

https://gitlab.com/gitlab-org/gitlab/-/issues/196131

https://corpus.kanji.zinbun.kyoto-u.ac.jp/gitlab/help/integration/saml.md

https://securityaffairs.com/175370/security/gitlab-addressed-critical-flaws-in-ce-and-ee.html

https://twitter.com/Dinosn/status/1843129331952021667

https://www.wiz.io/vulnerability-database/cve/cve-2025-25292

https://rubysec.com/advisories/CVE-2025-25292/

https://nvd.nist.gov/vuln/detail/CVE-2025-25292

https://securityvulnerability.io/vulnerability/CVE-2024-45409

https://smartermsp.com/cybersecurity-threat-advisory-critical-gitlab-saml-vulnerability/

https://x.com/httpvoid0x2f/status/1842520432219423043

https://vulners.com/cve/CVE-2025-25292

https://gbhackers.com/critical-ruby-saml-vulnerabilities/

https://www.exploit-db.com/exploits/50888

https://www.facebook.com/kinghacker10s/videos/cve-2024-45409-ruby-saml-auth-bypass-in-gitlab-we-will-analyze-cve-2024-45409-a-/1141702450802272/

https://gitlab.cn/docs/14.0/ee/integration/saml.html

https://secalerts.co/vulnerability/CVE-2025-25291

https://code.gov.cz/nia/ruby-saml/-/tree/eidas-saml-extensions

https://hoploninfosec.com/gitlab-vulnerabilities/

https://www.rescana.com/post/comprehensive-report-on-gitlab-security-updates-critical-vulnerability-mitigations-for-versions-17

https://www.ctol.digital/news/gitlab-security-patch-protecting-against-critical-saml-flaw/

https://experts.mpai.community/software/help/integration/saml.md

https://osv.dev/vulnerability/GHSA-754f-8gm6-c4r2

https://rubysec.com/advisories/CVE-2025-25291/

https://www.cvedetails.com/cve/CVE-2024-45409/

https://git.egov.bg/so/decidim-sofia/soa24-55-819/-/blob/main/decidim-ruby-saml/CHANGELOG.md

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25292

https://gitlab.ow2.org/help/integration/saml.md

https://advisory.eventussecurity.com/advisory/gitlab-addresses-vulnerabilities-allowing-attackers-to-access-valid-user-accounts/

https://www.technadu.com/exploiting-critical-authenticated-bypass-vulnerabilities-to-gain-admin-access/581557/

https://cvefeed.io/vuln/detail/CVE-2024-45409

https://testbnull.medium.com/bypass-gitlab-auth-b%E1%BA%B1ng-ma-thu%E1%BA%ADt-h%E1%BA%AFc-%C3%A1m-9cc002201b66

https://www.wiz.io/vulnerability-database/cve/cve-2025-25291

https://repository.prace-ri.eu/git/help/integration/saml.md

https://software.rcc.uchicago.edu/git/help/integration/saml.md

https://www.kb.cert.org/vuls/id/475445

https://www.techtalkthai.com/gitlab-fixes-critical-saml-authentication-bypass-flaw/

https://microfluidics.utoronto.ca/gitlab/help/user/group/saml_sso/index.md

https://vulners.com/cve/CVE-2025-25291

https://beyondmachines.net/event_details/gitlab-fixes-critical-security-flaws-in-community-edition-ce-and-enterprise-edition-ee-3-u-0-z-8/gD2P6Ple2L

https://code.gov.cz/nia/ruby-saml/-/tree/master

https://blog.criticalthinkingpodcast.io/p/hackernotes-ep-92-saml-xpath-confusion-chinese-dns-poisoning-and-ai-powered-403-bypasser

https://ccb.belgium.be/advisories/warning-critical-and-high-severity-vulnerabilities-gitlabs-community-and-enterprise