← Back

CVE-2024-9183

nvd nist
Published: Dec 5, 2025Modified: Dec 10, 2025

JSON object

Loading...
6.4
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
Exploitability: 1.2 / Impact: 5.2
Source: NVD

Description

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific conditions.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 18.4.0 to 18.4.5
Gitlab
From 18.5.0 to 18.5.3
Gitlab
From 18.6.0 to 18.6.1
Gitlab
From 18.4.0 to 18.4.5
Gitlab
From 18.5.0 to 18.5.3
Gitlab
From 18.6.0 to 18.6.1

Related CWEs

CWE-367
Time-of-check Time-of-use (TOCTOU) Race Condition
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.

References (3)

Source: cve@gitlab.com
Source: cve@gitlab.com
Broken Link
Source: cve@gitlab.com
Third Party Advisory

Timeline

No history available yet.