critical9.8
CVE-2019-12428
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11.
Impact
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gitlab | Gitlab | from 6.8.0 through 11.11.0 |
References
- NVD record
- CVE.org record
- https://about.gitlab.com/blog/categories/releases/
- https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/
- https://about.gitlab.com/blog/categories/releases/
- https://about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/