CVE Vulnerabilities

CVE-2024-6685

Published: Sep 16, 2024 | Modified: Sep 24, 2024
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 17.1.7, 17.2 prior to 17.2.5, and 17.3 prior to 17.3.2, where group runners information was disclosed to unauthorised group members.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 16.7.0 (including) 17.1.7 (excluding)
Gitlab Gitlab 17.2.0 (including) 17.2.5 (excluding)
Gitlab Gitlab 17.3.0 (including) 17.3.2 (excluding)
Gitlab Ubuntu esm-apps/xenial *

References