Gitlab -- vulnerabilities

2024-07-1000:00:00

vuxml.freebsd.org

gitlab

pipeline job

url change

deploy token

package registry

user banning

subdomain takeover

security document

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

EPSS

0.001

Percentile

47.8%

JSON

Gitlab reports:

An attacker can run pipeline jobs as an arbitrary user
Developer user with admin_compliance_framework permission can change group URL
Admin push rules custom role allows creation of project level deploy token
Package registry vulnerable to manifest confusion
User with admin_group_member permission can ban group members
Subdomain takeover in GitLab Pages

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchgitlab-ce= 17.1.0UNKNOWN
FreeBSDanynoarchgitlab-ce< 17.1.2UNKNOWN
FreeBSDanynoarchgitlab-ee= 17.1.0UNKNOWN
FreeBSDanynoarchgitlab-ee< 17.1.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	gitlab-ce	= 17.1.0	UNKNOWN
FreeBSD	any	noarch	gitlab-ce	< 17.1.2	UNKNOWN
FreeBSD	any	noarch	gitlab-ee	= 17.1.0	UNKNOWN
FreeBSD	any	noarch	gitlab-ee	< 17.1.2	UNKNOWN