GCVE-110-NCSC-2024-329

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published August 12, 2024

GitLab heeft kwetsbaarheden verholpen in GitLab Community Edition (CE) en Enterprise Edition (EE).

Weaknesses (CWE)

CWE-400Uncontrolled Resource ConsumptionCWE-639Authorization Bypass Through User-Controlled KeyCWE-94Improper Control of Generation of Code ('Code Injection')CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-305Authentication Bypass by Primary WeaknessCWE-116Improper Encoding or Escaping of Output

Risk Scores

CVSS 3.1

6.8/10

Medium · CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions	Platforms
gitlab	gitlab	—	—

Aliases

CVE-2024-2800 CVE-2024-3035 CVE-2024-3114 CVE-2024-3958 CVE-2024-4207 CVE-2024-4210 CVE-2024-4784 CVE-2024-5423 CVE-2024-6329 CVE-2024-6356 CVE-2024-7586

References

advisory

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON