Incorrect Ownership Assignment in GitLab

CVE-2024-9633

7.5HIGH

Key Information

Vendor
Gitlab
Status
Gitlab
Vendor
CVE Published:
14 November 2024

Summary

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from 17.6 before 17.6.2. This issue allows an attacker to create a group with a name matching an existing unique Pages domain, potentially leading to domain confusion attacks.

Affected Version(s)

GitLab < 17.4.2

GitLab < 17.5.4

GitLab < 17.6.2

Refferences

https://gitlab.com/gitlab-org/gitlab/-/issues/498257
issue-trackingpermissions-required
https://hackerone.com/reports/2759470
technical-descriptionexploitpermissions-required

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseMitre Database

Credit

Thanks [psycho_012](https://hackerone.com/psycho_012) for reporting this vulnerability through our HackerOne bug bounty program
.