← voltar
CVE-2024-4660

Missing Authorization in GitLab

CVSS 6.5 MEDIUMEPSS 0.5%CWE-862
An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
GitLab · GitLab

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/https://gitlab.com/gitlab-org/gitlab/-/issues/460892https://hackerone.com/reports/2480126