writeups.xyz / crewjam/saml - IdP XSS Via Missing Binding Syntax Validation In ACS Location

Submitter : c2a

Date: 17 October 2023

Bounty : undisclosed

Vulnerabilities :

• XSS
• SAML
• Security Code Review

Programs :

• Crewjam

Authors :

• Francesco Lacerenza (@Lacerenza_fra)

Link :
https://doyensec.com/resources/Doyensec_SecurityAdvisory_crewjam_saml_Q32023.pdf