An issue has been discovered in GitLab EE affecting all versions starting from 16.4 before 16.7.6, all versions starting from 16.8 before 16.8.3, all versions starting from 16.9 before 16.9.1. Users with the `Guest` role can change `Custom dashboard projects` settings contrary to permissions.
References
Link | Resource |
---|---|
https://gitlab.com/gitlab-org/gitlab/-/issues/439240 | Permissions Required |
https://hackerone.com/reports/2316435 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
04 Mar 2024, 20:26
Type | Values Removed | Values Added |
---|---|---|
CWE | NVD-CWE-Other | |
CPE | cpe:2.3:a:gitlab:gitlab:16.9.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
|
First Time |
Gitlab
Gitlab gitlab |
|
References | () https://gitlab.com/gitlab-org/gitlab/-/issues/439240 - Permissions Required | |
References | () https://hackerone.com/reports/2316435 - Permissions Required |
22 Feb 2024, 00:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-02-22 00:15
Updated : 2024-03-04 20:26
NVD link : CVE-2024-0861
Mitre link : CVE-2024-0861
CVE.ORG link : CVE-2024-0861
JSON object : View
Products Affected
gitlab
- gitlab
CWE