CVE-2024-0231
Improper Control of Resource Identifiers ('Resource Injection') in GitLab
Résumé
Improper Control of Resource Identifiers ('Resource Injection') in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"12.0.0"},{"fixed":"17.0.5"},{"introduced":"17.1.0"},{"fixed":"17.1.3"},{"introduced":"17.2.0"},{"fixed":"17.2.1"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com