CVE-2024-9512

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Résumé

Description d'origine

La description telle que publiée par la source (souvent en anglais).

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami gitlab

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"18.0.2"}]}]

Références

web gitlab.com
web hackerone.com
web nvd.nist.gov