CVE-2024-12093 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath valid…
Medium CVSS: 6.8

CVE-2024-12093

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.
Vendor
Gitlab
Product
Gitlab
CWE
CWE-1288
Yayın Tarihi
2025-05-22 15:16:03
Güncelleme
2025-08-08 18:37:36
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

CWE-1288 Gitlab MEDIUM Gitlab 2025

Referanslar

https://gitlab.com/gitlab-org/gitlab/-/issues/507445 https://hackerone.com/reports/2851261