CVE-2025-11984
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to bypass WebAuthn two-factor authentication by manipulating the session state under certain conditions.
Vendor
Product
CWE
Yayın Tarihi
2025-12-11 05:16:36
Güncelleme
2025-12-23 21:01:04
Source Identifier
cve@gitlab.com
KEV Date Added
-