CVE-2024-13041

Summary: CVE-2024-13041 affects GitLab CE/EE versions with SAML user creation where the external groups setting overrides the external provider configuration, potentially allowing internal project/group access to non-external users. Affected versions (per sources): GitLab 16.4 up to 17.5.5 (pre-1...

CVE-2023-38048

CVE-2023-38048 affects Easy!Appointments (older releases) via a BOLA vulnerability in GET, PUT, DELETE /providers/{providerId}, enabling a low-privileged user to fetch, modify, or delete a privileged provider account. The vulnerability is described consistently across sources as an insecure autho...