A Cross Window Forgery vulnerability exists within GitLab CE/EE affecting all versions from 16.3 prior to 16.11.5, 17.0 prior to 17.0.3, and 17.1 prior to 17.1.1. This condition allows for an attacker to abuse the OAuth authentication flow via a crafted payload.
Metrics
Affected Vendors & Products
References
History
Thu, 12 Dec 2024 20:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:enterprise:*:*:* |
Wed, 18 Sep 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Thu, 29 Aug 2024 15:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Gitlab
Gitlab gitlab |
|
CPEs | cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:* | |
Vendors & Products |
Gitlab
Gitlab gitlab |
MITRE
Status: PUBLISHED
Assigner: GitLab
Published: 2024-07-09T13:30:57.825Z
Updated: 2024-09-17T16:00:34.552Z
Reserved: 2024-03-04T20:30:38.564Z
Link: CVE-2024-2177
Vulnrichment
Updated: 2024-08-01T19:03:39.319Z
NVD
Status : Analyzed
Published: 2024-07-09T14:15:03.953
Modified: 2024-12-12T20:17:46.297
Link: CVE-2024-2177
Redhat
No data.