Beveiligingsadvies

CVE-2025-11984

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-11 04:04:47

Laatst bijgewerkt 2026-02-26 16:21:04

Toegewezen door GitLab

CVSS-score 6.8

Status PUBLISHED

Beschrijving

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an authenticated user to bypass WebAuthn two-factor authentication by manipulating the session state under certain conditions.

← Alle CVE's bekijken Bekijk op cve.org ↗