← CVE Intelligence

CVE-2024-8311

Improper Protection of Alternate Path in GitLab PUBLISHED

Description (CNA)

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

Affected (CNA)

Vendor / productVersions
GitLab / GitLabaffected 17.2 before 17.2.5; affected 17.3 before 17.3.2

CWE

CWE-424

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.