CVE-2024-9512

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Summary

Original description

The description as published by the source.

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Affected packages

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"18.0.2"}]}]

References

web gitlab.com
web hackerone.com
web nvd.nist.gov