VDB

CVE-2024-4784

CVE-2024-4784 PUBLISHED

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

EPSS 0.02% · 4.7th percentile

Risk Scores

EPSS Score
0.02%
4.7th percentile

Affected Products

VendorProductVersions
Bitnamigitlab16.7.0, 17.1.0, 17.2.0
Bitnamigitlab16.7.0, 17.1.0, 17.2.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Aug 7, 2024 CVE Published
  • Aug 8, 2024 PoC Published
  • Aug 8, 2024 CVE Updated
  • Aug 13, 2024 EPSS Score
  • Aug 20, 2024 PoC Published
  • Sep 3, 2024 EPSS Score
  • Sep 24, 2024 EPSS Score
  • Oct 5, 2024 Coalition ESS Score
  • Oct 14, 2024 EPSS Score
  • Nov 4, 2024 EPSS Score
  • Nov 25, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›