CVE-2024-5258 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-5258 PUBLISHED

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.

EPSS 0.01% · 0.9th percentile

Risk Scores

EPSS Score

0.01%

0.9th percentile

Affected Products

Vendor	Product	Versions
Bitnami	gitlab	16.10.0, 16.11.0, 17.0.0
Bitnami	gitlab	16.10.0, 16.11.0, 17.0.0

Timeline

Jan 21, 1970 Security Advisory
May 21, 2024 CVE Published
May 24, 2024 EPSS Score
Jun 17, 2024 EPSS Score
Jul 10, 2024 EPSS Score
Aug 2, 2024 EPSS Score
Aug 25, 2024 EPSS Score
Sep 17, 2024 EPSS Score
Oct 5, 2024 Coalition ESS Score
Oct 10, 2024 EPSS Score
Oct 16, 2024 Coalition ESS Score
Nov 2, 2024 EPSS Score

References

Open in Interactive Console →