Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
Published: 2024-05-24
Score: 4 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Upgrade to versions 16.10.6, 16.11.3, 17.0.1 or above.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2024-46548 An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
History

Fri, 13 Dec 2024 17:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:*

Thu, 03 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Thu, 03 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Title Improper Access Control in GitLab Missing Authorization in GitLab
Weaknesses CWE-862

Thu, 29 Aug 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Gitlab
Gitlab gitlab
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Vendors & Products Gitlab
Gitlab gitlab

Subscriptions

Gitlab Gitlab
cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published:

Updated: 2024-10-03T06:23:19.497Z

Reserved: 2024-05-24T12:43:00.719Z

Link: CVE-2024-5318

cve-icon Vulnrichment

Updated: 2024-08-01T21:11:12.380Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-24T13:15:09.717

Modified: 2024-12-13T17:04:31.133

Link: CVE-2024-5318

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses