← CVE Intelligence

CVE-2024-4660

Missing Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 11.2 before 17.1.7; affected 17.2 before 17.2.5; affected 17.3 before 17.3.2

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.