GitLab 7.11.0 < 14.1.7 (CVE-2021-39879)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing authentication in all versions of GitLab CE/EE since version 7.11.0 allows an attacker with access to a victim's session to disable two-factor authentication CVE-2021-39879 Note that Nessus ha...

CVE-2021-39879

creationtimestamp| type| source ---|---|--- 2021-10-04 20:23:29+00:00| seen| https://t.me/cibsecurity/29890...

CVE-2021-39879

CVE-2021-39879 describes a vulnerability in GitLab CE/EE (all versions since 7.11.0) where missing authentication allows an attacker with a victim’s session to disable two-factor authentication. The connected documents confirm the issue across multiple sources but do not provide concrete patch/ve...