Threats tagged 'bit-gitlab-2024-5470'

GitLab CE/EE versions from 17.0.0 up to but not including 17.0.4 and from 17.1.0 up to but not including 17.1.2 contain an improper access control vulnerability. This flaw allows a Guest user with the 'admin_push_rules' permission to create project-level deploy tokens, which is beyond the intended permission scope. The issue has been addressed in versions 17.0.4 and 17.1.2. The severity of this vulnerability is considered low.