abraxas/keycloak-saml-redirect-param-split
Keycloak 26.8.1 High 7.4 Remote SAML broker leftover. A person with no Keycloak account can finish login as someone else by splitting the signed HTTP-Redirect query. Needs a redirect-signing IdP with validateSignature on and wantAssertionsSigned off. Loopback PoC.
GitHub repository with 12 stars and 6 forks.
Language: Python