:mastodon: decio<p>Deux vulnérabilités (CVE-2025-25291, CVE-2025-25292) permettent de contourner l’authentification SAML (SSO) sur GitHub et GitLab via une attaque par « signature wrapping ». <br>Un attaquant disposant d'une signature valide pourrait ainsi se connecter sous l’identité d’un autre utilisateur. La prudence est de mise, surtout qu’un gang spécialisé dans les ransomwares a récemment ciblé ces plateformes. L’exploitation active est à ce jour inconnue.</p><p>📌 GitLab recommande fortement la mise à jour vers 17.9.2 :<br>👇<br><a href="https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">about.gitlab.com/releases/2025</span><span class="invisible">/03/12/patch-release-gitlab-17-9-2-released/</span></a></p><p>📌 GitHub – Sign in as anyone (détails techniques) :<br>👇<br><a href="https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">github.blog/security/sign-in-a</span><span class="invisible">s-anyone-bypassing-saml-sso-authentication-with-parser-differentials/</span></a></p><p><a href="https://infosec.exchange/tags/Cyberveille" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Cyberveille</span></a><br><a href="https://infosec.exchange/tags/vulnerabilite" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>vulnerabilite</span></a><br><a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GitHub</span></a><br><a href="https://infosec.exchange/tags/GitLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GitLab</span></a><br><a href="https://infosec.exchange/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>SAML</span></a> <br><a href="https://infosec.exchange/tags/CVE_2025_25291" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE_2025_25291</span></a><br><a href="https://infosec.exchange/tags/CVE_2025_25292" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>CVE_2025_25292</span></a></p>