CVE-2024-9693
Incorrect Authorization in GitLab
Summary
Incorrect Authorization in GitLab
Original description
The description as published by the source.
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.0 prior to 17.3.7, starting from 17.4 prior to 17.4.4, and starting from 17.5 prior to 17.5.2, which could have allowed unauthorized access to the Kubernetes agent in a cluster under specific configurations.
Affected packages
Bitnami
gitlab
[{"type":"SEMVER","events":[{"introduced":"16.0.0"},{"fixed":"17.3.7"},{"introduced":"17.4.0"},{"fixed":"17.4.4"},{"introduced":"17.5.0"},{"fixed":"17.5.2"}]}]
References
- web gitlab.com
- web nvd.nist.gov