Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-11669

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.

Published

2024-11-26T19:15:22.367

Last Modified

2024-12-12T21:11:00.737

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-863
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application gitlab gitlab < 17.4.5 Yes
Application gitlab gitlab < 17.4.5 Yes
Application gitlab gitlab < 17.5.3 Yes
Application gitlab gitlab < 17.5.3 Yes
Application gitlab gitlab 17.6.0 Yes
Application gitlab gitlab 17.6.0 Yes
References