SB2024082254 - Multiple vulnerabilities in GitLab Community Edition (CE) and Enterprise Edition (EE)
Published: August 22, 2024
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Improper access control (CVE-ID: CVE-2024-6502)
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to the GitLab Web Interface does not guarantee information integrity when downloading source code from releases. A remote user can create a branch with the same name as a deleted tag.
2) Command Injection (CVE-ID: CVE-2024-7110)
The vulnerability allows a remote attacker to execute arbitrary commands on the target system.
The vulnerability exists due to the Prompt injection in "Resolve Vulnerabilty". A remote user can pass specially crafted data to the application and execute arbitrary commands in a victim's pipeline.
3) Improper access control (CVE-ID: CVE-2024-3127)
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A remote user can perform certain actions through GraphQL after a group owner enables IP restrictions.
4) Input validation error (CVE-ID: N/A)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input when importing GitHub repository. A remote user can pass specially crafted input to the application and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.