CVE-2024-4006

2024-04-2500:00:00

ubuntu.com

gitlab

versions

graphql

subscriptions

access scopes

security issue

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

An issue has been discovered in GitLab CE/EE affecting all versions
starting from 16.7 before 16.9.6, all versions starting from 16.10 before
16.10.4, all versions starting from 16.11 before 16.11.1 where personal
access scopes were not honored by GraphQL subscriptions

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchgitlab< anyUNKNOWN
ubuntu23.10noarchgitlab-agent< anyUNKNOWN
ubuntu24.04noarchgitlab-agent< anyUNKNOWN