CVE-2024-8266
Execution with Unnecessary Privileges in GitLab
Summary
Execution with Unnecessary Privileges in GitLab
Original description
The description as published by the source.
An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"17.1.0"},{"fixed":"17.6.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package git://git@gitlab.com:gitlab-org/gitlab.git
- report gitlab.com
- report hackerone.com