An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
History

Fri, 13 Dec 2024 17:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*
cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:*
cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:*

Thu, 03 Oct 2024 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Thu, 03 Oct 2024 06:30:00 +0000

Type Values Removed Values Added
Title Improper Access Control in GitLab Missing Authorization in GitLab
Weaknesses CWE-862

Thu, 29 Aug 2024 15:15:00 +0000

Type Values Removed Values Added
First Time appeared Gitlab
Gitlab gitlab
CPEs cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*
Vendors & Products Gitlab
Gitlab gitlab

cve-icon MITRE

Status: PUBLISHED

Assigner: GitLab

Published: 2024-05-24T12:44:25.720Z

Updated: 2024-10-03T06:23:19.497Z

Reserved: 2024-05-24T12:43:00.719Z

Link: CVE-2024-5318

cve-icon Vulnrichment

Updated: 2024-08-01T21:11:12.380Z

cve-icon NVD

Status : Analyzed

Published: 2024-05-24T13:15:09.717

Modified: 2024-12-13T17:04:31.133

Link: CVE-2024-5318

cve-icon Redhat

No data.