This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] GitLab CE and EE fix 8 vulnerabilities
GitLab versions 16.9.1, 16.8.3 and 16.7.6 fix 8 vulnerabilities in the GitLab Community Edition (CE) and Enterprise Edition (EE) products.
An authenticated remote attacker can carry out a stored XSS attack [1].
The vulnerability is present in product:
- GitLab;==0;==16.9.0
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
More information:
- CVE-2024-1451 at cve.org, NVD
- CWE-79 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker with admin_group_member permissions can perform privilege escalation [1].
The vulnerability is present in product:
- GitLab; ==0; >=16.5.0, <16.7.6; >=16.8.0, <16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
More information:
- CVE-2023-6477 at cve.org, NVD
- CWE-269 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker can bypass restrictions and thereby gain unauthorized access to information [1].
The vulnerability is present in product:
- GitLab; ==0; >=12.0.0, <16.7.6; >=16.8.0, < 16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2023-4895 at cve.org, NVD
- CWE-284 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker with "sub-maintainer" permissions can modify information without authorization [1].
The vulnerability is present in product:
- GitLab; >=0, <16.7.6; >=16.8.0, < 16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
More information:
- CVE-2023-3509 at cve.org, NVD
- CWE-285 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker can bypass the "Code Owners" rules [1].
The vulnerability is present in product:
- GitLab; ==0; >=15.1.0, <16.7.6; >=16.8.0, < 16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
More information:
- CVE-2024-0410 at cve.org, NVD
- CWE-284 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker can carry out a ReDoS attack [1].
The vulnerability is present in product:
- GitLab; ==0; >=11.3.0, <16.7.6; >=16.8.0, < 16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2023-6736 at cve.org, NVD
- CWE-400 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker can, under certain circumstances, authenticate directly by bypassing LDAP authentication [1].
The vulnerability is present in product:
- GitLab; ==0; >=16.1.0, <16.7.2; >=16.8.0, < 16.8.2; >=16.9.0, <16.9.2
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
More information:
- CVE-2024-1525 at cve.org, NVD
- CWE-284 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
An authenticated remote attacker can modify settings without authorization [1].
The vulnerability is present in product:
- GitLab; ==0; >=16.4.0, <16.7.6; >=16.8.0, < 16.8.3; >=16.9.0, <16.9.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
More information:
- CVE-2024-0861 at cve.org, NVD
- CWE-285 at cwe.mitre.org
The vulnerability was publicly disclosed 21. 2. 2024.
By CESNET, z.s.p.o. Martin Krajči on 23. 2. 2024.