Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2022-51026— Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login

Quick assessment

Affected
bytebase bytebase
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Bytebase 0.12.0 至 1.0.1 之前的版本存在一个身份验证绕过漏洞，允许未认证的攻击者以任意用户身份登录。该漏洞的根源在于 端点过度信任客户端提供的 GitLab 提供商配置。攻击者可将 设置为其控制的服务器，该服务器可返回指定邮箱的活跃用户信息。随后，Bytebase 会为该主体生成会话令牌，使攻击者能够冒充现有用户（包括所有者），或创建新成员。

CVSS 9.8 · Critical

Affected Version Matrix 2

VendorProduct Version RangeStatus
bytebase bytebase 0.12.0< 1.0.1 affected
1.0.1 unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-51026

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Bytebase 0.12.0 before 1.0.1 Authentication Bypass via GitLab Self-Hosted Login
Source: CVE Program / CVE List V5
Vulnerability Description
Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user. The flaw stems from trusting client-supplied GitLab provider configuration in the POST /api/auth/login/GITLAB_SELF_HOST endpoint. Attackers can set instanceUrl to a server they control that returns an active user with a chosen email. Bytebase then issues session tokens for that principal, letting attackers impersonate existing users including the Owner or create new members.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
bytebase bytebase 0.12.0 ~ 1.0.1 -

II. Public POCs for CVE-2022-51026

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-51026

请登录查看更多情报信息。

Vendor Pages for CVE-2022-51026 (1)

Other References for CVE-2022-51026 (6)

Same Patch Batch · bytebase · 2026-10-22 · 3 CVEs total

CVE-2026-115321 4.3 MEDIUM Bytebase before 3.16.0 Authorization Bypass via UpdateIssueComment
CVE-2026-115322 4.3 MEDIUM Bytebase before 3.16.0 Authorization Bypass via Rollout Service Task Run Handlers

IV. Related Vulnerabilities

Same product: bytebase
Same vendor: bytebase
Same weakness: CWE-290

V. Comments for CVE-2022-51026

No comments yet

Leave a comment