Threats tagged 'bit-gitlab-2024-1347'

GitLab CE/EE contains an authentication bypass vulnerability (CVE-2024-1347) affecting multiple version ranges before fixed releases. An attacker can exploit crafted email addresses to bypass domain-based restrictions on an instance or group under certain conditions. This issue affects versions prior to 16.9.6, versions from 16.10.0 up to but not including 16.10.4, and versions from 16.11.0 up to but not including 16.11.1. A patch is available to address this vulnerability.