CVE-2024-10043 — Incorrect Authorization in GitLab

CVE-2024-10043

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through the Wiki History Diff feature, potentially leading to information disclosure.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 14.3 before 17.4.6; affected 17.5 before 17.5.4; affected 17.6 before 17.6.2

CWE

CWE-863

References

https://gitlab.com/gitlab-org/gitlab/-/issues/499577
https://hackerone.com/reports/2774817

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.