An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Gitlab |
|
Configuration 1 [-]
|
No data.
No data.
Fixes
Solution
Upgrade to versions 16.10.6, 16.11.3, 17.0.1 or above.
Workaround
No workaround given by the vendor.
References
History
Fri, 13 Dec 2024 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:* |
Thu, 03 Oct 2024 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-284 |
Thu, 03 Oct 2024 06:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Improper Access Control in GitLab | Missing Authorization in GitLab |
| Weaknesses | CWE-862 |
Thu, 29 Aug 2024 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gitlab
Gitlab gitlab |
|
| CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published:
Updated: 2024-10-03T06:23:19.497Z
Reserved: 2024-05-24T12:43:00.719Z
Link: CVE-2024-5318
Vulnrichment
Updated: 2024-08-01T21:11:12.380Z
NVD
Status : Analyzed
Published: 2024-05-24T13:15:09.717
Modified: 2024-12-13T17:04:31.133
Link: CVE-2024-5318
Redhat
No data.
OpenCVE Enrichment
No data.