CVE-2024-5528
Incomplete Comparison with Missing Factors in GitLab
Summary
Incomplete Comparison with Missing Factors in GitLab
Original description
The description as published by the source.
An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.1.2"}]}]
References
- advisory about.gitlab.com
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com