Threats tagged 'bit-gitlab-2024-9164'

A critical vulnerability (CVE-2024-9164) in GitLab Enterprise Edition allows unauthorized users to run pipelines on arbitrary branches. This affects multiple version ranges starting from 12.5 up to versions before 17.2.9, 17.3 before 17.3.5, and 17.4 before 17.4.2. The issue is due to missing authentication for a critical function. A patch is available to address this vulnerability.