Non évaluée

Authorization Bypass Through User-Controlled Key in GitLab

CVE-2024-3035 Première détection SecPulse Aug 8, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

A permission check vulnerability in GitLab CE/EE affecting all versions starting from 8.12 prior to 17.0.6, 17.1 prior to 17.1.4, and 17.2 prior to 17.2.2 allowed for LFS tokens to read and write to the user owned repositories.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Faits clés

Gravité: Non évaluée
Publication: Aug 8, 2024
Première détection SecPulse: Aug 8, 2024
CWE: CWE-639

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:04