CVE-2024-0402 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-0402 PUBLISHED

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

EPSS 40.77% · 97.3th percentile

Risk Scores

EPSS Score

40.77%

97.3th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	16.8.0, 16.0.0, 16.6.0
Bitnami	gitlab	16.0.0, 16.6.0, 16.7.0

Timeline

Jan 21, 1970 Security Advisory
Jan 12, 2024 CVE Published
Jan 31, 2024 EPSS Score
Feb 22, 2024 CVE Updated
Mar 25, 2024 EPSS Score
Apr 21, 2024 EPSS Score
Jun 13, 2024 EPSS Score
Jul 10, 2024 EPSS Score
Sep 6, 2024 EPSS Score
Oct 3, 2024 EPSS Score
Oct 4, 2024 Coalition ESS Score
Nov 25, 2024 EPSS Score

References

Open in Interactive Console →