CVE-2024-5528
05.02.2025, 11:15
An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gitlab | gitlab | 𝑥 < 16.11.6 |
| gitlab | gitlab | 𝑥 < 16.11.6 |
| gitlab | gitlab | 17.0.0 ≤ 𝑥 < 17.0.4 |
| gitlab | gitlab | 17.0.0 ≤ 𝑥 < 17.0.4 |
| gitlab | gitlab | 17.1.0 ≤ 𝑥 < 17.1.2 |
| gitlab | gitlab | 17.1.0 ≤ 𝑥 < 17.1.2 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
- CWE-1023 - Incomplete Comparison with Missing FactorsThe software performs a comparison between entities that must consider multiple factors or characteristics of each entity, but the comparison does not include one or more of these factors.
- CWE-697 - Incorrect ComparisonThe software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.