4 matches found
GitLab 12.3 < 13.0.12 / 13.1 < 13.1.6 / 13.2 < 13.2.3 (CVE-2020-13292)
The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Flow. CVE-2020-13292 Note that Nessus has not tested for this issue but has instea...
CVE-2020-13292
In GitLab before 13.0.12, 13.1.6 and 13.2.3, it is possible to bypass E-mail verification which is required for OAuth Flow...
CVE-2020-13292
GitLab vulnerability CVE-2020-13292 affects GitLab before 13.0.12, 13.1.6, and 13.2.3, where it is possible to bypass E-mail verification required for the OAuth flow. This is a logic/authentication bypass in the OAuth setup, not a general service outage. The issue is documented across multiple so...
