Threats tagged 'bit-gitlab-2026-112212'

GitLab versions from 18.3 up to but not including 19.3.6, 19.4 up to 19.4.3, and 19.5 up to 19.5.1 contain a vulnerability where an unauthenticated user could poison a shared cache's OAuth/OIDC discovery document. This occurs due to improper trust of user-supplied values when constructing endpoint URLs in cached discovery responses, potentially redirecting flows to an attacker-controlled server. The issue has been fixed in versions 19.3.6, 19.4.3, and 19.5.1.