GitLab versions 17.1.2, 17.0.4 and 16.11.6 fix 6 vulnerabilities, 1 of them critical

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitLab versions 17.1.2, 17.0.4 and 16.11.6 fix 6 vulnerabilities, 1 of them critical

GitLab versions 17.1.2, 17.0.4 and 16.11.6 fix 6 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE).

GitLab - (CVE-2024-6385)

CVSS 9.6 (Critical)

Allows an authenticated remote attacker to run a pipeline as another user under certain circumstances [1].

The vulnerability is present in products:

GitLab Community Edition; >=15.8.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GiLab Enterprise Edition; >=15.8.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

More information:

CVE-2024-6385 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

GitLab - (CVE-2024-5257)

CVSS 4.9 (Medium)

Allows an authenticated remote attacker with the admin_compliance_framework permission to modify the URL for a group namespace [1].

The vulnerability is present in products:

GitLab Community Edition; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GiLab Enterprise Edition; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

More information:

CVE-2024-5257 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

GitLab - (CVE-2024-5470)

CVSS 3.8 (Low)

Allows an authenticated remote attacker with the admin_push_rules permission to create project-level deploy tokens [1].

The vulnerability is present in products:

GitLab Community Edition; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GitLab Enterprise Edition; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

More information:

CVE-2024-5470 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

GitLab - (CVE-2024-6595)

CVSS 3.0 (Low)

Allows an authenticated remote attacker to upload an NPM package with "conflicting" data [1].

The vulnerability is present in products:

GitLab Community Edition; >=11.8.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GitLab Enterprise Edition; >=11.8.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

More information:

CVE-2024-6595 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

GitLab - (CVE-2024-2880)

CVSS 2.7 (Low)

Allows an authenticated remote attacker with the admin_group_member permission to block group members [1].

The vulnerability is present in products:

GitLab Community Edition; >=16.5.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GitLab Enterprise Edition; >=16.5.0, <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

More information:

CVE-2024-2880 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

GitLab - (CVE-2024-5528)

CVSS 3.5 (Low)

Allows an authenticated remote attacker to take over a subdomain in GitLab Pages [1].

The vulnerability is present in products:

GitLab Community Edition; <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2
GitLab Enterprise Edition; <16.11.6; >=17.0.0, <17.0.4; >=17.1.0, <17.1.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

More information:

CVE-2024-5528 at cve.org, NVD

The vulnerability was publicly disclosed 10. 7. 2024.

Report feedback

[TLP:CLEAR] GitLab versions 17.1.2, 17.0.4 and 16.11.6 fix 6 vulnerabilities, 1 of them critical

GitLab - (CVE-2024-6385)

CVSS 9.6 (Critical)

GitLab - (CVE-2024-5257)

CVSS 4.9 (Medium)

GitLab - (CVE-2024-5470)

CVSS 3.8 (Low)

GitLab - (CVE-2024-6595)

CVSS 3.0 (Low)

GitLab - (CVE-2024-2880)

CVSS 2.7 (Low)

GitLab - (CVE-2024-5528)

CVSS 3.5 (Low)

Links