Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7rfw-87cg-pgwh

Опубликовано: 22 мая 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

EPSS

Процентиль: 3%
0.00018
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-1288

Связанные уязвимости

CVSS3: 6.8
ubuntu
9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

CVSS3: 6.8
nvd
9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

CVSS3: 6.8
debian
9 месяцев назад

An issue has been discovered in GitLab CE/EE affecting all versions fr ...

EPSS

Процентиль: 3%
0.00018
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-1288