VDB
CVE-2024-8114
CVE-2024-8114
PUBLISHED
An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token (PAT) to escalate privileges.
EPSS 0.25% · 48.8th percentile
Risk Scores
EPSS Score
0.25%
48.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 8.12.0, 17.5.0, 17.6.0 |
| Bitnami | gitlab | 17.5.0, 17.6.0, 8.12.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Nov 26, 2024 CVE Published
- Nov 27, 2024 EPSS Score
- Nov 30, 2024 CVE Updated
- Dec 15, 2024 EPSS Score
- Dec 31, 2024 Coalition ESS Score
- Jan 1, 2025 EPSS Score
- Jan 18, 2025 EPSS Score
- Feb 5, 2025 EPSS Score
- Feb 22, 2025 EPSS Score
- Mar 11, 2025 EPSS Score
- Mar 28, 2025 EPSS Score