CVE-2024-6323CWE-863

Improper Isolation or Compartmentalization in GitLab

High · published June 26, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-06-26T23:30Z
EPSS history
Timeline
  • 26 JUN 23:30Z
    Improper Isolation or Compartmentalization in GitLab
    cvelistv5