Lucene search

K
osvGoogleOSV:CVE-2024-4006
HistoryApr 25, 2024 - 2:15 p.m.

CVE-2024-4006

2024-04-2514:15:09
Google
osv.dev
3
cve-2024-4006
gitlab ce
gitlab ee
graphql
personal access scopes

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.7 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1 where personal access scopes were not honored by GraphQL subscriptions

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%