CVE-2024-6685

CVSS V2 None CVSS V3 None

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to unauthorised group members.

Overview

CVE ID
CVE-2024-6685

Assigner
GitLab

Vulnerability Status
PUBLISHED

Published Version
2024-09-16T21:33:58.732Z

Last Modified Date
2024-09-16T21:33:58.732Z

Weakness Enumerations

CWE	URL
CWE-639	http://cwe.mitre.org/data/definitions/639.html

References

Reference URL	Reference Tags
https://gitlab.com/gitlab-org/gitlab/-/issues/472012	issue-tracking permissions-required
https://hackerone.com/reports/2584372	technical-description exploit permissions-required

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-6685
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6685

History

Created	Old Value	New Value	Data Type	Notes
2024-10-06 01:19:49				Added to TrackCVE