GCVE-110-NCSC-2024-490

Advisory PublishedCVSS 5.4/10

Vulnetix · Advisory published December 13, 2024

Incorrect Ownership Assignment

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-407Inefficient Algorithmic ComplexityCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-770Allocation of Resources Without Limits or ThrottlingCWE-601URL Redirection to Untrusted Site ('Open Redirect')CWE-708Incorrect Ownership AssignmentCWE-863Incorrect AuthorizationCWE-532Insertion of Sensitive Information into Log File

Risk Scores

CVSS 3.1

5.4/10

Medium · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Affected Products

Vendor	Product	Versions	Platforms
gitlab	gitlab	—	—
open_source	gitlab	—	—

Aliases

CVE-2024-10043 CVE-2024-11274 CVE-2024-12292 CVE-2024-8116 CVE-2024-8179 CVE-2024-8233 CVE-2024-8647 CVE-2024-8650 CVE-2024-9367 CVE-2024-9387 CVE-2024-9633

References

advisory

Browse GCVE Records

73,738 records in the GCVE database · Updated July 19, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON