Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4v46-g8g9-868m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

EPSS

Процентиль: 50%
0.0027
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 5 лет назад

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

CVSS3: 9.8
nvd
больше 5 лет назад

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 for GitLab Community Edition (CE) and Enterprise Edition (EE) in the GitLab SAML integration had a validation issue that permitted an attacker to takeover another user's account.

CVSS3: 9.8
debian
больше 5 лет назад

Improper authentication exists in < 12.3.2, < 12.2.6, and < 12.1.12 fo ...

EPSS

Процентиль: 50%
0.0027
Низкий