CVE-2019-12428: GitLab

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue was discovered in GitLab Community and Enterprise Edition 6.8 through 11.11. Users could bypass the mandatory external authentication provider sign-in restrictions by sending a specially crafted request. It has Improper Authorization.

Affected products

• GitLab GitLab: from 6.8.0, up to and including 11.11.0

Published 2020-03-10. Last modified 2026-06-17.