Security analyst Stephan Sekula discovered an XML External Entity (XXE) vulnerability in ACTICO Workplace, which allows an attacker to read arbitrary files on the system.
SAML Raider is a Burp Suite extension and the tool of choice for many pentesters for testing SAML infrastructures. This blog post should give a brief…