Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m766-xfqm-qm37

Опубликовано: 11 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.8

Описание

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to bypass WebAuthn two-factor authentication by manipulating the session state under certain conditions.

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to bypass WebAuthn two-factor authentication by manipulating the session state under certain conditions.

EPSS

Процентиль: 5%
0.00023
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-288

Связанные уязвимости

CVSS3: 6.8
nvd
8 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to bypass WebAuthn two-factor authentication by manipulating the session state under certain conditions.

CVSS3: 6.8
debian
8 дней назад

GitLab has remediated an issue in GitLab CE/EE affecting all versions ...

CVSS3: 6.8
fstec
9 дней назад

Уязвимость программной платформы на базе git для совместной работы над кодом GitLab, связанная с обходом аутентификации с использованием альтернативного пути или канала, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 5%
0.00023
Низкий

6.8 Medium

CVSS3

Дефекты

CWE-288