CVE-2024-0402 | Vulnetix

CVE-2024-0402 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

EPSS 3.78% · 88.9th percentile

Risk Scores

EPSS Score

3.78%

88.9th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	16.0.0, 16.8.0, 16.6.0
Bitnami	gitlab	16.0.0, 16.6.0, 16.7.0

Timeline

Jan 21, 1970 Security Advisory
Jan 12, 2024 CVE Published
Jan 26, 2024 PoC Published
Jan 26, 2024 PoC Published
Jan 26, 2024 PoC Published
Jan 28, 2024 PoC Published
Jan 30, 2024 PoC Published
Jan 30, 2024 PoC Published
Jan 30, 2024 PoC Published
Jan 30, 2024 PoC Published
Jan 30, 2024 PoC Published
Jan 31, 2024 EPSS Score

References

https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ url
https://gitlab.com/gitlab-org/gitlab/-/issues/437819 url
https://nvd.nist.gov/vuln/detail/CVE-2024-0402 url
[MàJ] Multiples Vulnérabilités dans GitLab advisory

Open in Interactive Console →