Threats tagged 'bit-gitlab-2024-8970'

GitLab CE/EE versions from 11.6 up to but not including 17.2.9, from 17.3 up to but not including 17.3.5, and from 17.4 up to but not including 17.4.2 contain an authorization flaw. This vulnerability allows an attacker to trigger a pipeline as another user under certain conditions. The issue has been addressed in the fixed versions 17.2.9, 17.3.5, and 17.4.2. No known exploits are reported in the wild at this time.