This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] GitLab CE and EE fix 11 vulnerabilities
GitLab fixes 11 medium-severity vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) in versions 17.2.2, 17.1.4 and 17.0.6. The most severe vulnerabilities are listed below; the rest can be found at [1].
An authenticated remote attacker can read and write to other users' repositories using LFS tokens [1].
The vulnerability is present in product:
- GitLab; >=8.12, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2024-3035 at cve.org, NVD
- CWE-639: Authorization Bypass Through User-Controlled Key at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An authenticated remote attacker can access other users' projects using the security policy bot [1].
The vulnerability is present in product:
- GitLab; >=16.0, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
More information:
- CVE-2024-6356 at cve.org, NVD
- CWE-284: Improper Access Control at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An authenticated remote attacker can carry out a DoS attack using the "banzai pipeline" tool [1].
The vulnerability is present in product:
- GitLab; >=1.0, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-5423 at cve.org, NVD
- CWE-400: Uncontrolled Resource Consumption at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An authenticated remote attacker can carry out a DoS attack using specially crafted ADOC files [1].
The vulnerability is present in product:
- GitLab; >=12.6, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-4210 at cve.org, NVD
- CWE-400: Uncontrolled Resource Consumption at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An authenticated remote attacker can carry out a ReDoS attack [1].
The vulnerability is present in product:
- GitLab; >=11.3, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-2800. at cve.org, NVD
- CWE-400: Uncontrolled Resource Consumption at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An unauthenticated remote attacker can pass off a repository with potentially malicious code as a legitimate repository [1].
The vulnerability is present in product:
- GitLab; <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
More information:
- CVE-2024-3958 at cve.org, NVD
- CWE-94: Improper Control of Generation of Code ('Code Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
An authenticated remote attacker can access sensitive data from log files [1].
The vulnerability is present in product:
- GitLab; >=17.0, <17.0.6; >=17.1, <17.1.4; >=17.2, <17.2.2;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
More information:
- CVE-2024-7586 at cve.org, NVD
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor at cwe.mitre.org
The vulnerability was publicly disclosed 7. 8. 2024.
By CESNET, z.s.p.o. Martin Krajči on 9. 8. 2024.