CVE-2023-1965 (gitlab) | allinfosecnews.com

May 3, 2023, 9:15 p.m. |

National Vulnerability Database web.nvd.nist.gov

An issue has been discovered in GitLab EE affecting all versions starting from 14.2 before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. Lack of verification on RelayState parameter allowed a maliciously crafted URL to obtain access tokens granted for 3rd party Group SAML SSO logins. This feature isn't enabled by default.

access access tokens cve gitlab isn issue logins parameter party saml sso tokens url verification

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 5 months, 2 weeks ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 5 months, 2 weeks ago | web.nvd.nist.gov

android bypass check cve +10

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Staff DFIR Investigator

@ SentinelOne | United States - Remote

View on infosec-jobs.com

Senior Consultant.e (H/F) - Product & Industrial Cybersecurity

@ Wavestone | Puteaux, France

View on infosec-jobs.com

Information Security Analyst

@ StarCompliance | York, United Kingdom, Hybrid

View on infosec-jobs.com

Senior Cyber Security Analyst (IAM)

@ New York Power Authority | White Plains, US

View on infosec-jobs.com