CVEvulnerability

CVE-2024-0231

2.7 LOW Published 2024-07-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-07-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
2.7 LOW — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-74, CWE-99

Description

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.

Affected configurations

• gitlab gitlab (>= 12.0.0 < 17.0.5) • gitlab gitlab (>= 17.1.0 < 17.1.3) • gitlab gitlab 17.2.0

Related

Weakness · CWE (2)

  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
  • CWE-99 Improper Control of Resource Identifiers weakness

References