Threats tagged 'bit-gitlab-2024-6678'

A critical authentication bypass vulnerability (CVE-2024-6678) exists in GitLab CE/EE that affects multiple version ranges. This flaw allows an attacker to trigger a pipeline as an arbitrary user under certain conditions. The issue impacts versions from 8.14 up to but not including 17.1.7, from 17.2 up to but not including 17.2.5, and from 17.3 up to but not including 17.3.2. A patch is available to remediate this vulnerability.