An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, which allowed cross project access for Security policy bot.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/469108 | Exploit Issue Tracking |
| https://hackerone.com/reports/2575051 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
06 Aug 2025, 18:51
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* | |
| CWE | NVD-CWE-noinfo | |
| First Time |
Gitlab gitlab
Gitlab |
|
| References | () https://hackerone.com/reports/2575051 - Permissions Required | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/469108 - Exploit, Issue Tracking | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.4 |
05 Feb 2025, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-05 10:15
Updated : 2025-08-06 18:51
NVD link : CVE-2024-6356
Mitre link : CVE-2024-6356
JSON object : View
Products Affected
gitlab
- gitlab
CWE