Unrated

Improper Isolation or Compartmentalization in GitLab

CVE-2024-6323 First seen on SecPulse Jun 27, 2024

Original description The description as published by the source.

Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com

Key facts

Severity: Unrated
Published: Jun 27, 2024
First seen on SecPulse: Jun 27, 2024
CWE: CWE-863

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05