Threats tagged 'ghsa-5vpg-xw87-4738'

A vulnerability in GitLab EE versions from 18.1 before 18.3.6, 18.4 before 18.4.4, and 18.5 before 18.5.2 could allow an attacker with limited privileges to remove Duo authentication flows of another user under certain conditions. This issue impacts the integrity of multi-factor authentication configurations but does not affect confidentiality or availability.