ANCHORE-2024-8402

ANCHORE-2024-8402 PUBLISHED

An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. An input validation issue in the Google Cloud IAM integration feature could have enabled a Maintainer to introduce malicious code.

Affected Products

Vendor	Product	Versions
GitLab	GitLab Enterprise	17.2, 17.2, 17.8

Timeline

Mar 13, 2025 CVE Published
Mar 13, 2025 CVE Updated

References

https://gitlab.com/gitlab-org/gitlab/-/issues/482813 url
https://hackerone.com/reports/2601569 url

Open in Interactive Console →