PT-2025-11151 · Gitlab · Gitlab Ce/Ee
CVE-2024-8402
·
Publicado
2025-03-12
·
Atualizado
2025-08-08
CVSS v3.1
7.4
Alta
| Vetor | AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions:
GitLab EE versions 17.2 through 17.7.7
GitLab EE versions 17.8 through 17.8.5
GitLab EE versions 17.9 through 17.9.2
Description:
An issue was discovered in the Google Cloud IAM integration feature, where an input validation problem could have enabled a Maintainer to introduce malicious code.
Recommendations:
For versions 17.2 through 17.7.7, update to version 17.7.7 or later.
For versions 17.8 through 17.8.5, update to version 17.8.5 or later.
For versions 17.9 through 17.9.2, update to version 17.9.2 or later.
Exploit
Correção
Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gitlab Ce/Ee