Lucene search

PRIOn knowledge basePRION:CVE-2024-0861

HistoryFeb 22, 2024 - 12:15 a.m.

Design/Logic Flaw

2024-02-2200:15:00

PRIOn knowledge base

www.prio-n.com

gitlab

security flaw

guest role

custom dashboard

6.7 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

JSON

An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the Guest role can change Custom dashboard projects settings contrary to permissions.

CPENameOperatorVersion
gitlabeq16.9.0
gitlabge16.8.0
gitlablt16.8.3
gitlabge16.4.0
gitlablt16.7.6

Name	Operator	Version
gitlab	eq	16.9.0
gitlab	ge	16.8.0
gitlab	lt	16.8.3
gitlab	ge	16.4.0
gitlab	lt	16.7.6

References

gitlab.com/gitlab-org/gitlab/-/issues/439240

hackerone.com/reports/2316435