Vulnerability in Ruby-SAML allowing authentication bypass in GitLab
Corrective updates for the GitLab collaborative development platform have been released – versions 17.3.3, 17.2.6, and 17.1.8, which fix a critical vulnerability allowing SAML (Security Assertion Markup Language) authentication bypass. The issue is caused by a vulnerability (CVE-2024-45409) in the Ruby libraries ruby-saml and omniauth-saml, which implement the client side of SAML authorization. The vulnerabilities have been assigned the maximum danger level of 10 out of 10. The issue has been resolved in the updates of the packages […]
