GoogleOSV:CVE-2024-5258CVE-2024-5258
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%
An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gitlab | eq | 17.0.0-ee | |
| gitlab | eq | 17.0.1-rc42-ee |
Related
4.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.1%