Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 9:04 a.m.•11 views

CVE-2024-5258

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic...

4.4CVSS6.7AI score0.00275EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/23 11:15 a.m.•36 views

CVE-2024-5258

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic...

4.4CVSS4.3AI score0.00275EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/23 11:02 a.m.•43 views

CVE-2024-5258 Authorization Bypass Through User-Controlled Key in GitLab

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic...

4.4CVSS4.2AI score0.00275EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/23 11:02 a.m.•578 views

CVE-2024-5258

CVE-2024-5258 is an authorization bypass in GitLab. The vulnerability affects GitLab releases: 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1, where an authenticated attacker could exploit a crafted naming convention to bypass pipeline authorization logic. The issue impacts th...

4.4CVSS6.1AI score0.00275EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/05/23 11:02 a.m.•10 views

CVE-2024-5258 Authorization Bypass Through User-Controlled Key in GitLab

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic...

4.4CVSS6.3AI score0.00275EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2024/05/23 12:00 a.m.•32 views

GitLab 16.10 < 16.10.6 / 16.11 < 16.11.3 / 17.0 < 17.0.1 (CVE-2024-5258)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming...

4.4CVSS5.6AI score0.00275EPSS
SaveExploits1References3
Rows per page
Query Builder