"Using a flaw in GitBook’s SSO login flow, they were able to create login sessions acting as GitBook staff."

Since this has now been closed, can we have more details on what happened?