← Back

CVE-2024-6356

nvd nist
Published: Feb 5, 2025Modified: Jun 17, 2026

JSON object

Loading...
4.4
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Exploitability: 1.3 / Impact: 2.7
Source: NVD

Description

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which allowed cross project access for Security policy bot.

Affected (3)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 16.0.0 to 17.0.6
Gitlab
From 17.1.0 to 17.1.4
Gitlab
From 17.2.0 to 17.2.2

Related CWEs

CWE-286
Incorrect User Management
The product does not properly manage a user within its environment.

References (2)

Source: cve@gitlab.com
ExploitIssue Tracking
Source: cve@gitlab.com
Permissions Required

Timeline

No history available yet.