← CVE Intelligence

CVE-2024-10219

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions from 15.6 before 18.0.6, 18.1 before 18.1.4, and 18.2 before 18.2.2 that under certain conditions could have allowed authenticated users to bypass access controls and download private artifacts by accessing specific API endpoints.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 15.6 before 18.0.6; affected 18.1 before 18.1.4; affected 18.2 before 18.2.2

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.