Threats tagged 'bit-gitlab-2024-11931'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	–	EPSS 0.3%	CVE-2024-11931GitLab · Insufficient Granularity of Access Control MediumEPSS 0.3%2025-01-28GCVE DatabaseCVE-2024-11931 GitLab CE/EE versions from 17.0 up to but not including 17.6.4, 17.7 up to 17.7.3, and 17.8 up to 17.8.1 contain an access control vulnerability. This flaw allows users with the developer role to potentially exfiltrate protected CI variables via the CI lint feature under certain conditions. A patch is available to address this issue. EPSS 0.3%Vulnerability #bit-gitlab-2024-11931 #bitnami	GCVE Database	2025-01-28

Page 1 of 1