NetSight
low2.2

CVE-2021-39879

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authenti…

Impact

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication

Affected products

VendorProductAffected versions
GitlabGitlab
from 7.11.0 before 14.1.7

Weakness classification

References