This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] GitLab CE and EE fix 6 vulnerabilities
GitLab versions 17.6.1, 17.5.3 and 17.4.5 fix 6 vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE) [1].
Allows an authenticated remote attacker with access to the victim's personal access token (PAT) to elevate their privileges [1].
The vulnerability is present in products:
- GitLab Community Edition; >=8.12, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=8.12, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
More information:
- CVE-2024-8114 at cve.org, NVD
- CWE-862: Missing Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
Allows an authenticated remote attacker, using a malicious cargo.toml file, to carry out a DoS attack [1].
The vulnerability is present in products:
- GitLab Community Edition; >=12.6, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=12.6, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-8237 at cve.org, NVD
- CWE-407: Inefficient Algorithmic Complexity at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
Allows an authenticated remote attacker to access sensitive data due to overly broad token scope [1].
The vulnerability is present in products:
- GitLab Community Edition; >=16.9.8, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=16.9.8, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2024-11669 at cve.org, NVD
- CWE-863: Incorrect Authorization at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
Allows an authenticated remote attacker, through the integration of a malicious Harbor registry, to carry out a DoS attack [1].
The vulnerability is present in products:
- GitLab Community Edition; >=15.6, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=15.6, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2024-8177 at cve.org, NVD
- CWE-407: Inefficient Algorithmic Complexity at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
Allows an authenticated remote attacker, by sending forged API calls, to cause a DoS condition [1].
The vulnerability is present in products:
- GitLab Community Edition; >=13.2.4, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=13.2.4, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
More information:
- CVE-2024-11828 at cve.org, NVD
- CWE-407: Inefficient Algorithmic Complexity at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
Allows an authenticated remote attacker to bypass authentication checks and gain unauthorized access to streaming results [1].
The vulnerability is present in products:
- GitLab Community Edition; >=16.11, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
- GitLab Enterprise Edition; >=16.11, <17.4.5; >=17.5, <17.5.3; >=17.6, <17.6.1
CVSS: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
More information:
- CVE-2024-11668 at cve.org, NVD
- CWE-613: Insufficient Session Expiration at cwe.mitre.org
The vulnerability was publicly disclosed 26. 11. 2024.
By CESNET, z.s.p.o. Michaela Jarošová on 3. 12. 2024.