An issue has been discovered in GitLab EE affecting all versions starting from 15.2 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose updates to issues to a banned group member using the API.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/442049 | Broken Link |
| https://hackerone.com/reports/2369988 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
06 Aug 2025, 18:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* | |
| References | () https://hackerone.com/reports/2369988 - Permissions Required | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/442049 - Broken Link | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| First Time |
Gitlab gitlab
Gitlab |
05 Feb 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-05 10:15
Updated : 2025-08-06 18:51
NVD link : CVE-2024-1539
Mitre link : CVE-2024-1539
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-862
Missing Authorization