Threats tagged 'bit-gitlab-2024-6385'

GitLab CE/EE versions from 15.8 up to but not including 16.11.6, from 17.0 up to but not including 17.0.4, and from 17.1 up to but not including 17.1.2 contain an improper access control vulnerability. This flaw allows an attacker to trigger a pipeline as another user under certain conditions. The issue has been fixed in versions 16.11.6, 17.0.4, and 17.1.2. No known exploits are reported in the wild at this time.