CVE-2021-39879

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"7.11.0"},{"fixed":"14.1.7"}]}]

Références

advisory gitlab.com
report gitlab.com
web nvd.nist.gov