CVE-2024-12093

MEDIUM

GitLab 11.1-17.10.6 17.11-17.11.2 18.0 - Two-Factor Authentication Bypass via SAML Response XPath Validation

Title source: llm
STIX 2.1

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

References (2)

Core 2
Core References
Exploit, Issue Tracking issue-tracking permissions-required
https://gitlab.com/gitlab-org/gitlab/-/issues/507445
Permissions Required technical-description exploit permissions-required
https://hackerone.com/reports/2851261

Scores

CVSS v3 6.8
EPSS 0.0006
EPSS Percentile 17.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-1288
Status published
Products (2)
gitlab/gitlab 18.0.0 (2 CPE variants)
gitlab/gitlab 11.1.0 - 17.10.7 (2 CPE variants)
Published May 22, 2025
Tracked Since Feb 18, 2026