Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
External Control of Critical State Data in GitLab
Vulnerability Description
An issue has been discovered in GitLab EE/CE affecting all versions from 16.9.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2. An improper input validation error allows attacker to squat on accounts via linking arbitrary unclaimed provider identities when JWT authentication is configured.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Vulnerability Type
对关键状态数据的外部可控制
Vulnerability Title
GitLab 安全漏洞
Vulnerability Description
GitLab是美国GitLab公司的一个开源的端到端软件开发平台，具有内置的版本控制、问题跟踪、代码审查、CI/CD（持续集成和持续交付）等功能。 GitLab EE/CE 16.9.7至17.1.7之前版本、17.2至17.2.5之前版本和17.3至17.3.2之前版本存在安全漏洞，该漏洞源于输入验证不当，可能允许攻击者通过链接任意未被认领的身份提供商身份来进行账户抢注。
CVSS Information
N/A
Vulnerability Type
N/A