← CVE Intelligence

CVE-2024-5258

Authorization Bypass Through User-Controlled Key in GitLab PUBLISHED

Description (CNA)

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 16.10 before 16.10.6; affected 16.11 before 16.11.3; affected 17.0 before 17.0.1

CWE

CWE-639

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.