Skip to content
OpenAdvisories
Unscored CVE-2019-5486 EUVD-2019-15061GHSA-x79q-qfgr-wrvw

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that cou…

Published Dec 18, 2019 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A authentication bypass vulnerability exists in GitLab CE/EE <v12.3.2, <v12.2.6, and <v12.1.10 in the Salesforce login integration that could be used by an attacker to create an account that bypassed domain restrictions and email verification requirements.

Affected products

VendorProductAffectedFixed
— GitLab CE/EE 12.3.2, 12.2.6, and 12.1.10 —

References