Threats tagged 'bit-gitlab-2024-4612'

GitLab EE contains an open redirect vulnerability (CVE-2024-4612) affecting versions from 12.9 up to but not including 17.1.7, 17.2 up to 17.2.5, and 17.3 up to 17.3.2. This flaw can break the OAuth flow under certain conditions, potentially allowing an attacker to take over user accounts. The vulnerability has been assigned medium severity. A patch is available to address this issue.