CVE-2024-5528
Incomplete Comparison with Missing Factors in GitLab
Résumé
Incomplete Comparison with Missing Factors in GitLab
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.
Paquets affectés
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"17.1.2"}]}]
Références
- advisory about.gitlab.com
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com