CVE-2024-0402

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-0402
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-0402.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-0402
Aliases
Withdrawn
2024-09-03T03:13:53.942986Z
Published
2024-01-26T01:15:08Z
Modified
2024-05-29T20:13:29Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events