Lucene search
Veracode Vulnerability DatabaseVERACODE:42349HistoryAug 06, 2023 - 5:07 p.m.
Remote Code Execution (RCE)
2023-08-0617:07:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
47.5%
gitlab is vulnerable to Remote Code Execution (RCE). This vulnerability occurs due to a flaw in the way that GitLab handles group SAML SSO. An attacker can exploit this vulnerability to invite arbitrary users to a group, and then change the user’s email address to an attacker-controlled address. This can be used to take over the user’s account.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 | |
| gitlab:sid | eq | 13.4.7-2 | |
| gitlab:sid | eq | 13.3.9-1 |
Related
thn
thn
GitLab Issues Security Patch for Critical Account Takeover Vulnerability
2022-06-03 15:01:00
osv
osv
BIT-gitlab-2022-1680
2024-03-06 11:15:53
CVE-2022-1680
2022-06-06 18:15:00
debiancve
debiancve
CVE-2022-1680
2022-06-06 18:15:00
cvelist
cvelist
CVE-2022-1680
2022-06-06 17:05:16
prion
prion
Code injection
2022-06-06 18:15:00
nessus
nessus
ubuntucve
ubuntucve
CVE-2022-1680
2022-06-06 00:00:00
cve
cve
CVE-2022-1680
2022-06-06 18:15:00
freebsd
freebsd
Gitlab -- multiple vulnerabilities
2022-06-01 00:00:00
wallarmlab
wallarmlab
GitLab Security Issues: Six Months of Vulnerabilities
2022-08-01 13:31:27