Количество 5
Количество 5
CVE-2024-13041
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups.
CVE-2024-13041
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups.
CVE-2024-13041
An issue was discovered in GitLab CE/EE affecting all versions startin ...
GHSA-j94v-jxmv-27r2
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups.
BDU:2025-00323
Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, связанная с неправильным управлением действиями пользователя, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-13041 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups. | CVSS3: 4.2 | 0% Низкий | 6 месяцев назад |
 | CVE-2024-13041 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups. | CVSS3: 4.2 | 0% Низкий | 6 месяцев назад |
| CVE-2024-13041 An issue was discovered in GitLab CE/EE affecting all versions startin ... | CVSS3: 4.2 | 0% Низкий | 6 месяцев назад |
| GHSA-j94v-jxmv-27r2 An issue was discovered in GitLab CE/EE affecting all versions starting from 16.4 prior to 17.5.5, starting from 17.6 prior to 17.6.3, and starting from 17.7 prior to 17.7.1. When a user is created via the SAML provider, the external groups setting overrides the external provider configuration. As a result, the user may not be marked as external thereby giving those users access to internal projects or groups. | CVSS3: 4.2 | 0% Низкий | 6 месяцев назад |
 | BDU:2025-00323 Уязвимость программной платформы на базе git для совместной работы над кодом GitLab EE/ CE, связанная с неправильным управлением действиями пользователя, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.2 | 0% Низкий | 6 месяцев назад |
Уязвимостей на страницу