Group Member Handler Component Unauthorized Access

The vulnerability of the Group Member Handler component in the Git-based software platform for collaborative code development on GitLab relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain...

PT-2024-6517 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.7 through 17.1.7 GitLab CE/EE versions 17.2 through 17.2.5 GitLab CE/EE versions 17.3 through 17.3.2 Description: An issue was discovered in GitLab CE/EE where group runners information was disclosed to unauthorized...

GitLab Group Member Handler Ban Arbitrary Members

The vulnerability of the admingroupmember function in the Group Member Handler component of the Git-based software development platform, which is used for collaborative code development on GitLab, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious...

PT-2024-5349

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 16.5 through 16.11.6 GitLab CE/EE versions 17.0 through 17.0.4 GitLab CE/EE versions 17.1 through 17.1.2 Description The issue is related to insufficient access control in the admin group member function of the Group Memb...