Skip to content
OpenAdvisories
High NCSC-2024-0490 11 CVEs

Kwetsbaarheden verholpen in GitLab

Published Dec 13, 2024 · Updated Dec 13, 2024 · nl

Vendor: GitLab Vendor: OpenSource Product: GitLab Product: gitlab

Summary

GitLab heeft kwetsbaarheden verholpen in GitLab CE/EE (Specifiek voor versies 11.0 tot 17.6.2).

Details

Interpretaties
De kwetsbaarheden bevinden zich in verschillende versies van GitLab CE/EE en stellen aanvallers in staat om groepen te creëren met namen die overeenkomen met bestaande unieke domeinen, wat kan leiden tot domeinverwarring. Daarnaast kunnen gebruikers ongeautoriseerde toegang krijgen tot vertrouwelijke incidenttitels via de Wiki History Diff-functie, en kan er een injectie van NEL-headers plaatsvinden in Kubernetes proxy-responses, wat het risico op gegevensexfiltratie vergroot. Bovendien kunnen gevoelige informatie in GraphQL-mutaties worden gelogd en bewaard, wat kan leiden tot ongeautoriseerde toegang tot gevoelige gegevens.

Oplossingen
GitLab heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Vulnerabilities 11

  • High 8.7
    CVE-2024-11274

    URL Redirection to Untrusted Site ('Open Redirect') in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltrati…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • High 7.5
    CVE-2024-8233

    Inefficient Algorithmic Complexity in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 9.4 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could cause a denial of service with requests for diff files on a commit or merge request.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 6.4
    CVE-2024-9387

    URL Redirection to Untrusted Site ('Open Redirect') in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2024-8179

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 17.3 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. Improper output encoding could lead to XSS if CSP is not enabled.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.4
    CVE-2024-8647

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

    An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2024-8116

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions from 16.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. By using a specific GraphQL query, under specific conditions an unauthorized user can retrieve branch names.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 5.3
    CVE-2024-8650

    Incorrect Authorization in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions from 15.0 prior to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2 that allowed non-member users to view unresolved threads marked as internal notes in public projects merge requests.

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.3
    CVE-2024-9367

    Allocation of Resources Without Limits or Throttling in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2, that allows an attacker to cause uncontrolled CPU consumption, potentially leading to a Denial of Service (DoS) condit…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Medium 4.0
    CVE-2024-12292

    Insertion of Sensitive Information into Log File in GitLab

    An issue was discovered in GitLab CE/EE affecting all versions starting from 11.0 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, where sensitive information passed in GraphQL mutations may have been retained in Gr…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2024-10043

    Incorrect Authorization in GitLab

    An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through…

    GitLab GitLab gitlab Web / CMS Ubuntu
  • Low 3.1
    CVE-2024-9633

    Incorrect Ownership Assignment in GitLab

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from 17.6 before 17.6.2. This issue allows an attacker to create a group with a name mat…

    GitLab GitLab gitlab Web / CMS Ubuntu

Revision history

  1. #0

    Initiele versie

References