ruby-saml auth bypass in gitlab - SERP Analysis

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2025-25292/

https://projectdiscovery.io/blog/ruby-saml-gitlab-auth-bypass

https://about.gitlab.com/releases/2024/09/17/patch-release-gitlab-17-3-3-released/

https://cert.europa.eu/publications/security-advisories/2024-101/

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2024-45409/

https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/

https://thehackernews.com/2024/09/gitlab-patches-critical-saml.html

https://www.darkreading.com/application-security/gitlab-warns-max-severity-authentication-bypass-bug

https://github.com/synacktiv/CVE-2024-45409

https://www.bleepingcomputer.com/news/security/gitlab-patches-critical-authentication-bypass-vulnerabilities/

https://www.helpnetsecurity.com/2024/10/09/exploit-cve-2024-45409/

https://threatprotect.qualys.com/2024/09/19/gitlab-addressed-authentication-bypass-vulnerability-in-community-edition-ce-and-enterprise-edition-ee-cve-2024-45409/

https://gitlab.com/gitlab-org/gitlab/-/issues/486565

https://smartermsp.com/cybersecurity-threat-advisory-new-critical-gitlab-saml-vulnerability/

https://projectdiscovery.io/blog/github-enterprise-saml-authentication-bypass

https://soc.cyber.wa.gov.au/advisories/20241008001-GitLab-Critical-SAML-Vulnerability/

https://www.securityweek.com/gitlab-patches-critical-authentication-bypass-vulnerability/

https://portswigger.net/research/saml-roulette-the-hacker-always-wins

https://www.linkedin.com/posts/caturegli_ruby-saml-gitlab-authentication-bypass-activity-7249876282170044418-nFY8

https://foresiet.com/blog/gitlab-patches-critical-saml-authentication-flaw-protect-your-systems-from-exploitation

https://csirt.egi.eu/2024/10/14/critical-risk-saml-authentication-bypass-flaw/

https://advisories.gitlab.com/pkg/gem/ruby-saml/

https://workos.com/blog/ruby-saml-cve-2024-45409

https://x.com/Synacktiv/status/1843257946236674404

https://github.com/advisories/GHSA-4vc4-m8qh-g8jm

https://cyble.com/blog/active-exploitation-of-saml-vulnerability-cve-2024-45409/

https://vulert.com/vuln-db/bitnami-gitlab-185835

https://www.bleepingcomputer.com/news/security/gitlab-releases-fix-for-critical-saml-authentication-bypass-flaw/

https://docs.gitlab.com/integration/saml/

https://twitter.com/pdiscoveryio/status/1842347643353067814

https://www.linkedin.com/posts/blackstormsecurityresearch_ruby-saml-gitlab-authentication-bypass-activity-7257784985842016257-qZr-

https://advisories.gitlab.com/pkg/gem/ruby-saml/CVE-2025-25293/

https://x.com/httpvoid0x2f/status/1842520432219423043

https://www.reddit.com/r/pwnhub/comments/1jaf6uu/gitlab_issues_urgent_security_warning_over/

https://vulnera.com/newswire/gitlab-issues-security-updates-for-critical-saml-authentication-bypass-vulnerability/

https://gitlab.com/gitlab-org/gitlab-foss/-/blob/v14.9.3/doc/integration/saml.md

https://thehackernews.com/2025/03/github-uncovers-new-ruby-saml.html

https://docs.gitlab.com/user/group/saml_sso/

https://osv.dev/vulnerability/BIT-gitlab-2025-25292

https://www.reddit.com/r/blueteamsec/comments/1fwvlky/rubysaml_gitlab_authentication_bypass_cve202445409/

https://www.tenable.com/cve/CVE-2024-45409

https://gitlab.com/gitlab-org/gitlab/-/blob/a2a1076e4736ee82652fce3366907578112275db/doc/integration/saml.md

https://threatprotect.qualys.com/2025/03/13/gitlab-addressed-critical-authentication-bypass-vulnerabilities-cve-2025-25291-cve-2025-25292/

https://hackyboiz.github.io/2024/10/19/mungsul/2024-10-19/

https://www.scworld.com/news/gitlab-fixes-critical-sso-bypass-vulnerabilities-in-update

https://medium.com/%40navedsaxena16/gitlab-addresses-critical-saml-authentication-bypass-vulnerability-in-ce-and-ee-editions-0829a2a88946

https://securityboulevard.com/2024/10/gitlab-patches-severe-saml-authentication-bypass-flaw-fixed/

https://m.facebook.com/story.php?story_fbid=960628336267274&id=100069603490878

https://app.daily.dev/posts/critical-saml-authentication-bypass-vulnerability-cve-2024-45409-in-ruby-saml-and-gitlab-ic1tazybn

https://gitlab.com/gitlab-org/gitlab/-/issues/389964

https://www.cybersecurity-help.cz/vdb/SB2024091807

https://bsky.app/profile/bleepingcomputer.com/post/3lkbihvgqav2t

https://gbhackers.com/gitlab-urges-organization/

https://twitter.com/Dinosn/status/1843129331952021667

https://sploitus.com/exploit?id=47E14B22-1DD1-5BEB-8127-3235F7EAE5BF

https://cybersecuritynews.com/gitlab-authentication-bypass-vulnerability/

https://vulert.com/vuln-db/CVE-2025-25292

https://securityonline.info/researchers-detail-ruby-saml-gitlab-flaw-cve-2024-45409-allows-saml-authentication-bypass/

https://prohoster.info/hmn/blog/novosti-interneta/uyazvimost-v-biblioteke-ruby-saml-privodyashhaya-k-obhodu-autentifikaczii-v-gitlab

https://rubysec.com/advisories/CVE-2025-25292/

https://nvd.nist.gov/vuln/detail/CVE-2025-25292

https://latesthackingnews.com/2024/09/21/gitlab-addressed-critical-saml-auth-flaw-with-the-latest-release/

https://securityaffairs.com/175370/security/gitlab-addressed-critical-flaws-in-ce-and-ee.html

https://vulners.com/cve/CVE-2025-25292

https://secalerts.co/vulnerability/CVE-2024-45409

https://gitlab.cn/docs/14.0/ee/integration/saml.html

https://securityvulnerability.io/vulnerability/CVE-2024-45409

https://www.facebook.com/kinghacker10s/videos/cve-2024-45409-ruby-saml-auth-bypass-in-gitlab-we-will-analyze-cve-2024-45409-a-/1141702450802272/

https://www.exploit-db.com/exploits/50888

https://code.gov.cz/nia/ruby-saml/-/tree/master

https://hoploninfosec.com/gitlab-vulnerabilities/

https://www.ctol.digital/news/gitlab-security-patch-protecting-against-critical-saml-flaw/

https://www.technadu.com/exploiting-critical-authenticated-bypass-vulnerabilities-to-gain-admin-access/581557/

https://experts.mpai.community/software/help/integration/saml.md

https://www.rescana.com/post/comprehensive-report-on-gitlab-security-updates-critical-vulnerability-mitigations-for-versions-17

https://gitlab.com/gitlab-org/gitlab/-/issues/196131

https://gitlab.ow2.org/help/integration/saml.md

https://smartermsp.com/cybersecurity-threat-advisory-critical-gitlab-saml-vulnerability/

https://osv.dev/vulnerability/GHSA-754f-8gm6-c4r2

https://rubysec.com/advisories/CVE-2025-25291/

http://www.bioinfotiget.it/gitlab/help/integration/saml.md

https://www.cvedetails.com/cve/CVE-2024-45409/

https://secalerts.co/vulnerability/CVE-2025-25291

https://git.egov.bg/so/decidim-sofia/soa24-55-819/-/blob/main/decidim-ruby-saml/CHANGELOG.md

https://gbhackers.com/critical-ruby-saml-vulnerabilities/

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-25292

https://software.rcc.uchicago.edu/git/help/integration/saml.md

https://advisory.eventussecurity.com/advisory/gitlab-addresses-vulnerabilities-allowing-attackers-to-access-valid-user-accounts/

https://socradar.io/gitlab-security-update-critical-authentication-rce-flaws/

https://repository.prace-ri.eu/git/help/integration/saml.md

https://microfluidics.utoronto.ca/gitlab/help/user/group/saml_sso/index.md

https://cvefeed.io/vuln/detail/CVE-2024-45409

https://www.techtalkthai.com/gitlab-fixes-critical-saml-authentication-bypass-flaw/

https://sekurak.pl/gitlab-naprawia-podatnosci-zwiazane-z-biblioteka-ruby-saml/

https://gitlab.com/gitlab-org/gitlab/-/issues/410062

https://code.gov.cz/nia/ruby-saml/-/tree/eidas-saml-extensions-unsquashed?ref_type=heads

https://developer.okta.com/blog/2018/02/27/a-breakdown-of-the-new-saml-authentication-bypass-vulnerability

https://www.runzero.com/blog/gitlab-instances/

https://git.egov.bg/so/decidim-sofia/soa24-55-819/-/blob/develop/decidim-ruby-saml/CHANGELOG.md

https://vulners.com/thn/THN:981E82EBC007BB6C01E1B10FFF7800F8