CVE-2024-12093CWE-1288

Improper Validation of Consistency within Input in GitLab

Medium · published May 22, 2025

CVSS v3.1
6.8
EPSS
0%
Percentile
39.7
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00471 · 39.7th percentile
Weakness
CWE-1288 · Improper Validation of Consistency within Input
Published
2025-05-22T14:32Z
EPSS history
Timeline
  • 22 MAY 14:32Z
    Improper Validation of Consistency within Input in GitLab
    cvelistv5