CVE-2024-9512 — Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

CVE-2024-9512

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab PUBLISHED

Description (CNA)

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.

Affected (CNA)

Vendor / product	Versions
GitLab / GitLab	affected 0 before 17.10.8; affected 17.11 before 17.11.4; affected 18.0 before 18.0.2

CWE

CWE-367

References

https://gitlab.com/gitlab-org/gitlab/-/issues/497748
https://hackerone.com/reports/2683469

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.