CVE-2024-1347

Published: Apr 25, 2024Modified: Dec 11, 2024

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue has been discovered in GitLab CE/EE affecting all versions before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker through a crafted email address may be able to bypass domain based restrictions on an instance or a group.

Affected (6)

Products: Gitlab: Gitlab

Gitlab

1 product

Gitlab

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gitlab Gitlab	Before 16.9.6
Gitlab Gitlab	From 16.10.0 to 16.10.4
Gitlab Gitlab	Before 16.9.6
Gitlab Gitlab	From 16.10.0 to 16.10.4
Gitlab Gitlab	Version 16.11.0
Gitlab Gitlab	Version 16.11.0