CVE-2024-1347
Authentication Bypass by Spoofing in GitLab
Résumé
Authentication Bypass by Spoofing in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker through a crafted email address may be able to bypass domain based restrictions on an instance or a group.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"16.9.6"},{"introduced":"16.10.0"},{"fixed":"16.10.4"},{"introduced":"16.11.0"},{"fixed":"16.11.1"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Ubuntu UBUNTU-CVE-2024-1347 gitlab
Références
- web gitlab.com
- web hackerone.com
- web nvd.nist.gov