CVE-2019-12428
CVE-2019-12428
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
CVSS 9.8 · Critique · EPSS 1,4%
- Publication
- Mise à jour
Pile logicielle: system