CVE-2024-5655: Latest GitLab API Vulnerability Threatens Customer Data Exposure

🗓️ 01 Jul 2024 18:21:39Reported by Nikhil MenonType

Latest GitLab API Vulnerability Threatens Customer Data Exposure. Vulnerability allows unauthorized pipeline execution under any user's credentials, affects versions 15.8 to 17.1.1, patch released

Reporter	Title	Published	Views	Family All 66
FreeBSD	Gitlab -- Vulnerabilities	26 Jun 202400:00	–	freebsd
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from deficiencies in access control, allowing attackers to execute arbitrary code.	28 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks.	9 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the Global Search technology in the software platform based on git for collaborative code development on GitLab allows a perpetrator to disclose protected information.	9 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GraphQL API interface of the software platform based on git for collaborative code development on GitLab allows a hacker to perform a CSRF attack.	26 Jun 202500:00	–	bdu_fstec
Circl	CVE-2024-4901	28 Jun 202413:05	–	circl
Circl	CVE-2024-4994	28 Jun 202413:05	–	circl
Circl	CVE-2024-5655	26 Jun 202422:53	–	circl
Circl	CVE-2024-6323	28 Jun 202413:05	–	circl
CNNVD	GitLab Cross-Site Scripting Vulnerability	26 Jun 202400:00	–	cnnvd