CVE-2024-0199
07.03.2024, 01:15
An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 11.3 ≤ 𝑥 < 16.7.7 |
| gitlab | gitlab | 11.3 ≤ 𝑥 < 16.7.7 |
| gitlab | gitlab | 16.8.0 ≤ 𝑥 < 16.8.4 |
| gitlab | gitlab | 16.8.0 ≤ 𝑥 < 16.8.4 |
| gitlab | gitlab | 16.9.0 ≤ 𝑥 < 16.9.2 |
| gitlab | gitlab | 16.9.0 ≤ 𝑥 < 16.9.2 |
𝑥
= Vulnerable software versions
References