GitLab versions 16.11.1, 16.10.4 and 16.9.6 fix 5 vulnerabilities

Do you think this report is well-written? *

Yes

Do you use this technology? *

Yes

Was this report useful to you?

Yes

We would be happy if you would describe:

The security services provided by CESNET are designed to provide significant support in ensuring the cybersecurity of connected organizations. Although we strive to provide quality and reliable services, it is not possible to guarantee absolute coverage of all security vulnerabilities. Our services should be seen as a complement to an organization's own security management, not as a replacement. The client bears ultimate responsibility for securing their environment.

This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] GitLab versions 16.11.1, 16.10.4 and 16.9.6 fix 5 vulnerabilities

GitLab Community Edition (CE) and Enterprise Edition (EE) versions 16.11.1, 16.10.4 and 16.9.6 fix 5 vulnerabilities [1].

GitLab - improper authentication (CVE-2024-4024)

CVSS 7.3 (High)

An authenticated remote attacker with credentials to a Bitbucket account can take over a GitLab account linked to another user's Bitbucket account, if Bitbucket is used on GitLab as an OAuth 2.0 provider [1].

The vulnerability is present in products:

GitLab Community Edition; >=7.8.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1
GitLab Enterprise Edition; >=7.8.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

More information:

CVE-2024-4024 at cve.org, NVD
CWE-287 at cwe.mitre.org

The vulnerability was publicly disclosed 24. 4. 2024.

GitLab - DoS (CVE-2024-2434)

CVSS 8.5 (High)

An authenticated remote attacker can, via path traversal, perform limited file reads and carry out a DoS attack [1].

The vulnerability is present in products:

GitLab Community Edition; >=16.9.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1
GitLab Enterprise Edition; >=16.9.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

More information:

CVE-2024-2434 at cve.org, NVD
CWE-22 at cwe.mitre.org

The vulnerability was publicly disclosed 24. 4. 2024.

GitLab - ReDoS (CVE-2024-2829)

CVSS 7.5 (High)

An unauthenticated remote attacker can carry out a DoS attack using a crafted wildcard filter in the FileFinder tool [1].

The vulnerability is present in products:

GitLab Community Edition; >=12.5.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1
GitLab Enterprise Edition; >=12.5.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

CVE-2024-2829 at cve.org, NVD
CWE-400 at cwe.mitre.org

The vulnerability was publicly disclosed 24. 4. 2024.

GitLab (CVE-2024-4006)

CVSS 4.3 (Medium)

An authenticated remote attacker can access data beyond the restrictions of an access token [1].

The vulnerability is present in products:

GitLab Community Edition; >=16.7.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1
GitLab Enterprise Edition; >=16.7.0, <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

More information:

CVE-2024-4006 at cve.org, NVD
CWE-863 at cwe.mitre.org

The vulnerability was publicly disclosed 24. 4. 2024.

GitLab (CVE-2024-1347)

CVSS 4.3 (Medium)

An authenticated remote attacker can bypass instance- or group-level domain-based restrictions using a maliciously crafted e-mail address [1].

The vulnerability is present in products:

GitLab Community Edition; <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1
GitLab Enterprise Edition; <16.9.6; >=16.10.0, <16.10.4; >=16.11.0, <16.11.1

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

More information:

CVE-2024-1347 at cve.org, NVD
CWE-287 at cwe.mitre.org

The vulnerability was publicly disclosed 24. 4. 2024.

Report feedback

[TLP:CLEAR] GitLab versions 16.11.1, 16.10.4 and 16.9.6 fix 5 vulnerabilities

GitLab - improper authentication (CVE-2024-4024)

CVSS 7.3 (High)

GitLab - DoS (CVE-2024-2434)

CVSS 8.5 (High)

GitLab - ReDoS (CVE-2024-2829)

CVSS 7.5 (High)

GitLab (CVE-2024-4006)

CVSS 4.3 (Medium)

GitLab (CVE-2024-1347)

CVSS 4.3 (Medium)

Links