Critical severity9.8NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026
CVE-2019-12428
CVE-2019-12428
Description
An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 1 more
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=6.8.0,<=11.11.0
- cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=6.8.0,<=11.11.0
- GitLab/GitLab Community and Enterprise Editiondescription
- Range: 6.8 - 11.11
Patches
Vulnerability mechanics
References
2- about.gitlab.com/blog/categories/releases/nvdRelease NotesVendor Advisory
- about.gitlab.com/releases/2019/06/03/security-release-gitlab-11-dot-11-dot-1-released/nvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.