CVE-2024-11669 — Incorrect Authorization in GitLab

CVE-2024-11669

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 16.9.8 before 17.4.5; affected 17.5 before 17.5.3; affected 17.6 before 17.6.1

CWE

CWE-863

References

https://gitlab.com/gitlab-org/gitlab/-/issues/501528

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.