GitLab versions 17.1.1, 17.0.3 and 16.11.5 fix 14 vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitLab versions 17.1.1, 17.0.3 and 16.11.5 fix 14 vulnerabilities

GitLab versions 17.1.1, 17.0.3 and 16.11.5 fix 14 vulnerabilities, including 1 critical and 3 high-severity ones, in GitLab Community Edition (CE) and Enterprise Edition (EE). The most severe vulnerabilities are described below; others can be found at [1].

GitLab - (CVE-2024-5655)

CVSS 9.6 (Critical)

An authenticated remote attacker can, under certain circumstances, run a pipeline as another user [1].

The vulnerability is present in products:

GitLab Community Edition; >=15.8.0, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1
GitLab Enterprise Edition; >=15.8.0, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

More information:

CVE-2024-5655 at cve.org, NVD
CWE-284 at cwe.mitre.org

The vulnerability was publicly disclosed 26. 6. 2024.

GitLab - XSS (CVE-2024-4901)

CVSS 8.7 (High)

An authenticated remote attacker can carry out an XSS attack [1].

The vulnerability is present in products:

GitLab Community Edition; >=16.9.0, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1
GitLab Enterprise Edition; >=16.9.0, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

More information:

CVE-2024-4901 at cve.org, NVD
CWE-79 at cwe.mitre.org

The vulnerability was publicly disclosed 26. 6. 2024.

GitLab - CSRF (CVE-2024-4994)

CVSS 8.1 (High)

An unauthenticated remote attacker can carry out a CSRF attack against the GraphQL API, which may lead to the execution of arbitrary GraphQL mutations [1].

The vulnerability is present in products:

GitLab Community Edition; >=16.0.1, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1
GitLab Community Edition; >=16.0.1, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

More information:

CVE-2024-4994 at cve.org, NVD
CWE-352 at cwe.mitre.org

The vulnerability was publicly disclosed 26. 6. 2024.

GitLab - (CVE-2024-6323)

CVSS 7.5 (High)

An unauthenticated remote attacker, due to improper authorization in global search, can disclose the contents of a private repository in a public project [1].

The vulnerability is present in product:

GitLab Enterprise Edition; >=16.11.0, <16.11.5; >=17.0.0, <17.0.3; >=17.1.0, <17.1.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

More information:

CVE-2024-6323 at cve.org, NVD
CWE-653 at cwe.mitre.org

The vulnerability was publicly disclosed 26. 6. 2024.

Report feedback

[TLP:CLEAR] GitLab versions 17.1.1, 17.0.3 and 16.11.5 fix 14 vulnerabilities

GitLab - (CVE-2024-5655)

CVSS 9.6 (Critical)

GitLab - XSS (CVE-2024-4901)

CVSS 8.7 (High)

GitLab - CSRF (CVE-2024-4994)

CVSS 8.1 (High)

GitLab - (CVE-2024-6323)

CVSS 7.5 (High)

Links