writeups.xyz / TOPdesk vulnerable to XML Signature Wrapping Attacks

Submitter : c2a

Date: 12 April 2023

Bounty : undisclosed

Vulnerabilities :

• XML Signature Wrapping
• SAML
• SSO

Programs :

• TOPdesk

Authors :

• Paulo A. Silva (@Pauloasilva_com)

Link :
https://char49.com/articles/topdesk-vulnerable-to-xml-signature-wrapping-attacks