VYPR
← All advisories
Medium severity6.8NVD Advisory· Published May 22, 2025· Updated Jun 17, 2026

CVE-2024-12093

CVE-2024-12093

Description

An issue has been discovered in GitLab CE/EE affecting all versions from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1. Improper XPath validation allows modified SAML response to bypass 2FA requirement under specialized conditions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 11.1.0, < 17.11.3
  • GitLab Inc./GitLab6 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 5 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.1.0,<17.10.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.1.0,<17.10.7
    • cpe:2.3:a:gitlab:gitlab:18.0.0:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:18.0.0:*:*:*:enterprise:*:*:*
    • (no CPE)range: from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 11.1
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 11.1 before 17.10.7, 17.11 before 17.11.3, and 18.0 before 18.0.1

Patches

Vulnerability mechanics

References

2

News mentions

1