Lucene search
PRIOn knowledge basePRION:CVE-2023-1965HistoryMay 03, 2023 - 9:15 p.m.
Default credentials
2023-05-0321:15:00
PRIOn knowledge base
www.prio-n.com
8
gitlab
unauthorized access
crafted url
verification
relaystate
access tokens
saml sso
An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn’t enabled by default.
Related
osv
osv
BIT-gitlab-2023-1965
2024-03-06 11:10:13
CVE-2023-1965
2023-05-03 21:15:18
cve
cve
CVE-2023-1965
2023-05-03 21:15:18
nvd
nvd
CVE-2023-1965
2023-05-03 21:15:18
cvelist
cvelist
CVE-2023-1965
2023-05-03 00:00:00
debiancve
debiancve
CVE-2023-1965
2023-05-03 21:15:18
nessus
nessus
freebsd
freebsd
Gitlab -- Multiple Vulnerabilities
2023-05-02 00:00:00