BIT-GITLAB-2024-5258

BIT-GITLAB-2024-5258 PUBLISHED CVSS 4.400000095367432 MEDIUM

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.

Risk Scores

CVSS 3.1

4.400000095367432

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions
GitLab	GitLab	16.10, 16.11, 17.0

Timeline

May 23, 2024 CVE Published
Aug 29, 2024 CVE Updated

References

GitLab Issue #443254 issue

Open in Interactive Console →