VDB

CVE-2024-4011

CVE-2024-4011 PUBLISHED

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote key results to objectives.

EPSS 0.08% · 23.5th percentile

Risk Scores

EPSS Score
0.08%
23.5th percentile

Affected Products

VendorProductVersions
Bitnamigitlab16.1.0, 17.0.0, 17.1.0
Bitnamigitlab16.1.0, 17.0.0, 17.1.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Jun 26, 2024 CVE Published
  • Jun 27, 2024 EPSS Score
  • Jul 19, 2024 EPSS Score
  • Aug 11, 2024 EPSS Score
  • Sep 2, 2024 EPSS Score
  • Sep 25, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 17, 2024 EPSS Score
  • Nov 9, 2024 EPSS Score
  • Dec 2, 2024 EPSS Score
  • Dec 25, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›