Non évaluée

Improper Authorization in GitLab

CVE-2024-3959 Première détection SecPulse Jun 27, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com

Faits clés

Gravité: Non évaluée
Publication: Jun 27, 2024
Première détection SecPulse: Jun 27, 2024
CWE: CWE-285

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03