CVE-2024-0231CWE-99

Improper Control of Resource Identifiers ('Resource Injection') in GitLab

Low · published July 24, 2024

CVSS v3.1
2.7
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

A resource misdirection vulnerability in GitLab CE/EE versions 12.0 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows an attacker to craft a repository import in such a way as to misdirect commits.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.8th percentile
Weakness
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
Published
2024-07-24T22:08Z
EPSS history
Timeline
  • 24 JUL 22:08Z
    Improper Control of Resource Identifiers ('Resource Injection') in GitLab
    cvelistv5