MEDIUM
CVE-2024-11668
CVSS
5.3
Description
An issue has been discovered in GitLab CE/EE affecting all versions from 16.11 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Long-lived connections could potentially bypass authentication controls, allowing unauthorized access to streaming results.
Summary dbcve.org
GitLab CE/EE versions 16.11 through 17.4.4, 17.5.0-17.5.2, and 17.6.0 contain an authentication bypass vulnerability where long-lived connections can circumvent authentication controls, enabling unauthorized access to streaming results.
Mitigation
Upgrade GitLab to version 17.4.5, 17.5.3, 17.6.1 or later to patch the authentication bypass in streaming connections.
Weakness (CWE)
CWE-613
EPSS Score
0.32%
Probability of exploitation in next 30 days
25th percentile
Base CVE data derived from NVD (public domain). Enrichment by
dbcve.org
(CC-BY-4.0). Fetched via API.