An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
Metrics
Affected Vendors & Products
References
History
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-05-24T12:44:25.720Z
Updated: 2024-08-29T15:04:59.281Z
Reserved: 2024-05-24T12:43:00.719Z
Link: CVE-2024-5318
Vulnrichment
Updated: 2024-08-01T21:11:12.380Z
NVD
Status : Awaiting Analysis
Published: 2024-05-24T13:15:09.717
Modified: 2024-05-24T18:09:20.027
Link: CVE-2024-5318
Redhat
No data.