Based on work recognized in Portswigger's Top 10 Web Hacking Techniques for 2022 - Authentication Bypass In Multi-Tenant Apps using passport-saml for SAML SSO Integrations

Description A remote attacker may be able to bypass SAML SSO authentication on a platform by exploiting CVE-2022-39299 affecting the passport-saml library.

A public exploit was not available (at the time of writing), and the advisory was published on 10/12/2022 with little/no information. Doyensec developed a working Proof Of Concept (PoC) generator to verify the issue against multi-tenant platforms in which the tenant admin is able to configure SAML SSO with a custom IdP.