Non évaluée

Business Logic Errors in GitLab

CVE-2024-6446 Première détection SecPulse Sep 13, 2024

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com
report hackerone.com
web about.gitlab.com

Faits clés

Gravité: Non évaluée
Publication: Sep 13, 2024
Première détection SecPulse: Sep 13, 2024
CWE: CWE-840

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05