← CVE Intelligence

CVE-2024-8116

Incorrect Authorization in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 16.9 before 17.4.6; affected 17.5 before 17.5.4; affected 17.6 before 17.6.2

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.