跳转到帖子

FreeBSD: VID-BCC8B21E-7122-11EF-BECE-2CF05DA270F3 (CVE-2024-8641): Gitlab -- vulnerabilities

recommended_posts

发布于
  • Members

FreeBSD: VID-BCC8B21E-7122-11EF-BECE-2CF05DA270F3 (CVE-2024-8641): Gitlab -- vulnerabilities

Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
09/11/2024
Created
09/17/2024
Added
09/13/2024
Modified
01/28/2025

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obtain a GitLab session token belonging to the victim.

Solution(s)

  • freebsd-upgrade-package-gitlab-ce
  • freebsd-upgrade-package-gitlab-ee

References

  • CVE-2024-8641
  • 查看数 693
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…