CVE-2024-9623
Incorrect Authorization in GitLab
Summary
Incorrect Authorization in GitLab
Original description
The description as published by the source.
An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"8.16.0"},{"fixed":"17.2.9"},{"introduced":"17.3.0"},{"fixed":"17.3.5"},{"introduced":"17.4.0"},{"fixed":"17.4.2"}]}]
References
- web gitlab.com
- web nvd.nist.gov