Zero-Day Exploitation of Atlassian Confluence

Re:Zero-Day Exploitation of Atlassian Confluence by tyingq on Friday June 03, 2022 @01:39AM (#31604661)

HTTP Redirecting out to an idp and it posting back to the application with a SAML assertion is pretty common, if that's what you mean. Lots of people do that with things like O365, the AWS Web Console, etc.

[ Parent | on HN ]

Re:Zero-Day Exploitation of Atlassian Confluence by RulerOf on Sunday June 05, 2022 @09:32PM (#31636516)

Of course. Just asking how is the web router aware of whether or not the redirect is necessary if you're not hitting the application to validate login state.

[ Parent | on HN ]