CVE-2024-9164
Description
An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.
Summary dbcve.org
GitLab EE allows authenticated users to run CI/CD pipelines on arbitrary branches, including protected branches they should not have access to. This is an authorization bypass where the pipeline execution permission checks can be circumvented, potentially allowing unauthorized code execution in the context of the pipeline runner.
Mitigation
Upgrade GitLab EE to version 17.2.9, 17.3.5, 17.4.2 or later. In the meantime, review and restrict pipeline permissions for non-admin users and audit recent pipeline executions on sensitive branches.