CVE-2024-0402

CVSS v3 9.9 CRITICAL

9.9^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

A

n issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

References

Link	Resource
https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/	Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/437819	Broken Link
https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/	Vendor Advisory
https://gitlab.com/gitlab-org/gitlab/-/issues/437819	Broken Link

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:::::community:::*
	cpe:2.3:a:gitlab:gitlab:::::enterprise:::*
	cpe:2.3:a:gitlab:gitlab:16.8.0::::community:::
	cpe:2.3:a:gitlab:gitlab:16.8.0::::enterprise:::

History

21 Nov 2024, 08:46

Type	Values Removed	Values Added
References	~~() https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - Vendor Advisory~~	() https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/ - Vendor Advisory
References	~~() https://gitlab.com/gitlab-org/gitlab/-/issues/437819 - Broken Link~~	() https://gitlab.com/gitlab-org/gitlab/-/issues/437819 - Broken Link

Information

Published : 2024-01-26 01:15

Updated : 2024-11-21 08:46

NVD link : CVE-2024-0402

Mitre link : CVE-2024-0402

CVE.ORG link : CVE-2024-0402

JSON object : View

Products Affected

gitlab

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2024-0402", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}]}, "published": "2024-01-26T01:15:08.920", "references": [{"url": "https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/437819", "tags": ["Broken Link"], "source": "[email protected]"}, {"url": "https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/437819", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en GitLab CE/EE que afecta a todas las versiones desde 16.0 anterior a 16.6.6, 16.7 anterior a 16.7.4 y 16.8 anterior a 16.8.1, lo que permite a un usuario autenticado escribir archivos en ubicaciones arbitrarias en el servidor GitLab mientras crea un workspace."}], "lastModified": "2024-11-21T08:46:30.360", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "2D6B2329-5500-4D95-8270-2CCB839C226F", "versionEndExcluding": "16.5.8", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "3732A61E-AFE9-4A84-B3A8-C34F0F79C5A0", "versionEndExcluding": "16.5.8", "versionStartIncluding": "16.0.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "8429A44F-1788-421A-99A9-1E650735BBDD", "versionEndExcluding": "16.6.6", "versionStartIncluding": "16.6.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "3D66D64A-B883-4A2C-B114-3A54F326BA8D", "versionEndExcluding": "16.6.6", "versionStartIncluding": "16.6.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "0F871342-EDE9-49F2-8081-04651A16CD6E", "versionEndExcluding": "16.7.4", "versionStartIncluding": "16.7.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "9A9ED476-FBE7-4022-AE16-18386E73AA59", "versionEndExcluding": "16.7.4", "versionStartIncluding": "16.7.0"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:16.8.0:*:*:*:community:*:*:*", "vulnerable": true, "matchCriteriaId": "246D6584-64A7-44AC-A279-ECA58E5ED1FB"}, {"criteria": "cpe:2.3:a:gitlab:gitlab:16.8.0:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "E591D495-7397-4DA2-A643-477B2E35A915"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}