Today > 1 Critical | 4 High | 7 Medium vulnerabilities - You can now download lists of IOCs here!

CVE-2024-2434

April 25, 2024, 1:18 p.m.

CVSS Score

8.5 / 10

Product(s) Impacted

GitLab CE/EE

16.9 - 16.9.6
16.10 - 16.10.4
16.11 - 16.11.1

GitLab CE/EE

16.9.0 - 16.9.5
16.10.0 - 16.10.3
16.11.0

Description

An issue has been discovered in GitLab affecting all versions of GitLab CE/EE 16.9 prior to 16.9.6, 16.10 prior to 16.10.4, and 16.11 prior to 16.11.1 where path traversal could lead to DoS and restricted file read.

Weaknesses

Date

Published: April 25, 2024, 11:15 a.m.

Last Modified: April 25, 2024, 1:18 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@gitlab.com

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

8.5

Exploitability Score

Impact Score

Base Severity