p PatchFirst

CVE-2024-4784

CVE-2024-4784 · Authentication Bypass by Primary Weakness in GitLab

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

CVSS 4.2 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • gitlab

    Versions
    • ≥ 16.7, < 17.0.6: Affected (semver)
    • ≥ 17.1, < 17.1.4: Affected (semver)
    • ≥ 17.2, < 17.2.2: Affected (semver)

    Update to 17.0.6; Update to 17.1.4; Update to 17.2.2

  • gitlab Ubuntu:16.04:LTS

    Versions
    • 8.4.3+dfsg-9
    • 8.4.3+dfsg-12
    • 8.5.8+dfsg-5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →