PT-2024-31912
CVE-2024-4612
·
تاريخ النشر
2024-09-12
·
تاريخ التحديث
2024-09-14
الوصف من
CVSS 3.1
6.4
متوسطةالمقاييسAV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
GitLab EE versions 12.9 through 17.1.6
GitLab EE versions 17.2 through 17.2.4
GitLab EE versions 17.3 through 17.3.1
Description
An issue has been discovered in GitLab EE that could allow for an account takeover by breaking the OAuth flow under certain conditions. This is due to an open redirect vulnerability.
Recommendations
For GitLab EE versions 12.9 through 17.1.6, update to version 17.1.7 or later.
For GitLab EE versions 17.2 through 17.2.4, update to version 17.2.5 or later.
For GitLab EE versions 17.3 through 17.3.1, update to version 17.3.2 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾