Report feedback

Allows an authenticated remote attacker to run a pipeline as an arbitrary user under certain circumstances [1].

The vulnerability is present in products:

• GitLab Community Edition; >=8.14, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2
• GitLab Enterprise Edition; >=8.14, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

More information:

• CVE-2024-6678 at cve.org, NVD
• CWE-290: Authentication Bypass by Spoofing at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker to inject commands into the connected Cube server due to incomplete input filtering [1].

The vulnerability is present in product:

• GitLab Enterprise Edition; >=16.11, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2.

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2024-8640 at cve.org, NVD
• CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker to make requests to internal resources using a crafted URL for the Maven Dependency Proxy [1].

The vulnerability is present in product:

• GitLab Enterprise Edition; >=16.8, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

More information:

• CVE-2024-8635 at cve.org, NVD
• CWE-918: Server-Side Request Forgery (SSRF) at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an unauthenticated remote attacker to carry out a DoS attack by sending a large 'glm_source' parameter [1].

The vulnerability is present in products:

• GitLab Community Edition; >=16.4, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2
• GitLab Enterprise Edition; >=16.4, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

• CVE-2024-8124 at cve.org, NVD
• CWE-1333: Inefficient Regular Expression Complexity at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker with the victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim [1].

The vulnerability is present in products:

• GitLab Community Edition; >=13.7, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2
• GitLab Enterprise Edition; >=13.7, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

More information:

• CVE-2024-8641 at cve.org, NVD
• CWE-270: Privilege Context Switching Error at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker to bypass the variable overwrite protection using a CI/CD template [1].

The vulnerability is present in product:

• GitLab Enterprise Edition; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

More information:

• CVE-2024-8311 at cve.org, NVD
• CWE-424: Improper Protection of Alternate Path at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker to read the source code of a private project using group templates [1].

The vulnerability is present in product:

• GitLab Enterprise Edition; >=11.2; <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

More information:

• CVE-2024-4660 at cve.org, NVD
• CWE-862: Missing Authorization at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.

Allows an authenticated remote attacker to take over an account through an open redirect vulnerability by disrupting the OAuth flow [1].

The vulnerability is present in product:

• GitLab Enterprise Edition; >=11.1, <17.1.7; >=17.2, <17.2.5; >=17.3, <17.3.2

CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

More information:

• CVE-2024-4283 at cve.org, NVD
• CWE-601: URL Redirection to Untrusted Site ('Open Redirect') at cwe.mitre.org

The vulnerability was publicly disclosed 11. 9. 2024.