Threats tagged 'bit-gitlab-2024-9183'

A Time-of-check Time-of-use (TOCTOU) race condition vulnerability (CVE-2024-9183) was found in GitLab CE/EE versions 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1. This flaw could allow an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific conditions. The issue has been remediated in the stated fixed versions.