An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.
History

Wed, 11 Dec 2024 20:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*

Thu, 03 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Thu, 03 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Title Improper Access Control in GitLab Incorrect Authorization in GitLab
Weaknesses CWE-863

Thu, 29 Aug 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Gitlab
Gitlab gitlab
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Vendors & Products Gitlab
Gitlab gitlab

cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2024-03-07T00:39:50.159Z

Updated: 2024-10-03T06:23:17.613Z

Reserved: 2024-01-02T18:30:42.712Z

Link: CVE-2024-0199

cve-icon Vulnrichment

Updated: 2024-08-01T17:41:16.006Z

cve-icon NVD

Status : Analyzed

Published: 2024-03-07T01:15:52.233

Modified: 2024-12-11T20:12:49.670

Link: CVE-2024-0199

cve-icon Redhat

No data.