PT-2019-17695 · Gitlab · Gitlab
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GitLab versions prior to 12.0.4
GitLab versions prior to 12.1.2
Description
An authentication issue was discovered that allowed a bypass of email verification.
Recommendations
For versions prior to 12.0.4, update to version 12.0.4 or later.
For versions prior to 12.1.2, update to version 12.1.2 or later.
Exploit
Correção
Improper Authentication
Authentication Bypass Using an Alternate Path or Channel
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Gitlab