[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2024-0199Date: (C)2024-03-07   (M)2024-03-22


An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions.

Reference:
https://gitlab.com/gitlab-org/gitlab/-/issues/436977
https://hackerone.com/reports/2295423
https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/

OVAL    2
oval:org.secpod.oval:def:98599
oval:org.secpod.oval:def:98600
XCCDF    1

© SecPod Technologies