An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.
Metrics
Affected Vendors & Products
References
History
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-03-07T00:39:50.159Z
Updated: 2024-09-17T15:40:06.030Z
Reserved: 2024-01-02T18:30:42.712Z
Link: CVE-2024-0199
Vulnrichment
Updated: 2024-08-01T17:41:16.006Z
NVD
Status : Awaiting Analysis
Published: 2024-03-07T01:15:52.233
Modified: 2024-03-07T13:52:27.110
Link: CVE-2024-0199
Redhat
No data.