Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-0410HistoryFeb 22, 2024 - 12:15 a.m.
CVE-2024-0410
2024-02-2200:15:51
Debian Security Bug Tracker
security-tracker.debian.org
8
gitlab
authorization bypass
cve-2024-0410
merge conflict
versions 15.1-16.7.6
versions 16.8-16.8.3
versions 16.9-16.9.1
developer
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
30.0%
An authorization bypass vulnerability was discovered in GitLab affecting versions 15.1 prior to 16.7.6, 16.8 prior to 16.8.3, and 16.9 prior to 16.9.1. A developer could bypass CODEOWNERS approvals by creating a merge conflict.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | gitlab | < 16.8.3-1 | gitlab_16.8.3-1_all.deb |
Related
osv
osv
CVE-2024-0410
2024-02-22 00:15:51
BIT-gitlab-2024-0410
2024-03-06 10:53:23
veracode
veracode
Improper Access Control
2024-03-10 13:34:37
vulnrichment
vulnrichment
CVE-2024-0410 Improper Access Control in GitLab
2024-02-21 23:30:59
prion
prion
Authorization
2024-02-22 00:15:00
nessus
nessus
GitLab 15.1 < 16.7.6 / 16.8 < 16.8.3 / 16.9 < 16.9.1 (CVE-2024-0410)
2024-02-21 00:00:00
FreeBSD : Gitlab -- Vulnerabilities (03bf5157-d145-11ee-acee-001b217b3468)
2024-02-22 00:00:00
cvelist
cvelist
CVE-2024-0410 Improper Access Control in GitLab
2024-02-21 23:30:59
ubuntucve
ubuntucve
CVE-2024-0410
2024-02-22 00:00:00
cve
cve
CVE-2024-0410
2024-02-22 00:15:51
nvd
nvd
CVE-2024-0410
2024-02-22 00:15:51
freebsd
freebsd
Gitlab -- Vulnerabilities
2024-02-21 00:00:00
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
30.0%
Related for DEBIANCVE:CVE-2024-0410