GitLab versions 16.10.2, 16.9.4 and 16.8.6 fix 4 vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitLab versions 16.10.2, 16.9.4 and 16.8.6 fix 4 vulnerabilities

GitLab Community Edition (CE) and Enterprise Edition (EE) versions 16.10.2, 16.9.4 and 16.8.6 fix 4 vulnerabilities [1].

GitLab - XSS (CVE-2024-3092)

CVSS 8.7 (High)

An authenticated remote attacker can craft a payload that may lead to an XSS attack when the code diff viewer is used [1].

The vulnerability is present in product:

GitLab; >=16.9.0, <16.9.4; >=16.10.0, <16.10.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

More information:

CVE-2024-3092 at cve.org, NVD
CWE-79 at cwe.mitre.org

The vulnerability was publicly disclosed 10. 4. 2024.

GitLab - XSS (CVE-2024-2279)

CVSS 8.7 (High)

An authenticated remote attacker can abuse the link auto-completion feature to craft a malicious payload, which may lead to an XSS attack [1].

The vulnerability is present in product:

GitLab; >=16.7.0, <16.8.6; >=16.9.0, <16.9.4; >=16.10.0, <16.10.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

More information:

CVE-2024-2279 at cve.org, NVD
CWE-79 at cwe.mitre.org

The vulnerability was publicly disclosed 10. 4. 2024.

GitLab - DoS (CVE-2023-6489)

CVSS 4.3 (Medium)

An authenticated remote attacker can increase the resource usage of a GitLab instance via the chat integration feature, leading to a denial of service [1].

The vulnerability is present in product:

GitLab; >=16.7.7, <16.8.6; >=16.9.0, <16.9.4; >=16.10.0, <16.10.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

More information:

CVE-2023-6489 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 10. 4. 2024.

GitLab - DoS (CVE-2023-6678)

CVSS 4.3 (Medium)

An authenticated remote attacker can carry out a DoS attack using maliciously crafted content in a junit test report file [1].

The vulnerability is present in product:

GitLab; <16.8.6; >=16.9.0, <16.9.4; >=16.10.0, <16.10.2

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

More information:

CVE-2023-6678 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 10. 4. 2024.

Report feedback

[TLP:CLEAR] GitLab versions 16.10.2, 16.9.4 and 16.8.6 fix 4 vulnerabilities

GitLab - XSS (CVE-2024-3092)

CVSS 8.7 (High)

GitLab - XSS (CVE-2024-2279)

CVSS 8.7 (High)

GitLab - DoS (CVE-2023-6489)

CVSS 4.3 (Medium)

GitLab - DoS (CVE-2023-6678)

CVSS 4.3 (Medium)

Links