PT-2024-6746
CVE-2024-4011
·
تاريخ النشر
2024-04-19
·
تاريخ التحديث
2024-08-30
الوصف من
CVSS 3.1
3.1
منخفضةالمقاييسAV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
GitLab CE/EE versions 16.1 through 16.11.5
GitLab CE/EE versions 17.0 through 17.0.3
GitLab CE/EE versions 17.1 through 17.1.1
Description:
The issue is related to inadequate access control in GitLab, a collaborative coding platform. It allows a non-project member to promote key results to objectives, potentially leading to unauthorized access to protected information.
Recommendations:
For versions 16.1 through 16.11.5, update to version 16.11.5 or later.
For versions 17.0 through 17.0.3, update to version 17.0.3 or later.
For versions 17.1 through 17.1.1, update to version 17.1.1 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾