Home Tools CVE CVE-2024-0199
HIGH

CVE-2024-0199

Gitlab GitLab 2024-03-07 CVSS v3.1
CVSS
8

Description

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

Weakness (CWE)

CWE-863 Incorrect Authorization

EPSS Score

0.71%
Probability of exploitation in next 30 days
51.9th percentile

References

https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/ Release Notes https://gitlab.com/gitlab-org/gitlab/-/issues/436977 Exploit, Issue Tracking https://hackerone.com/reports/2295423 Permissions Required
View on dbcve.org
Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.
Back to CVE