CVE-2024-8114CWE-862

Missing Authorization in GitLab

High · published November 26, 2024

CVSS v3.1
8.2
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token (PAT) to escalate privileges.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00669 · 51.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-11-26T18:31Z
EPSS history
Timeline
  • 26 NOV 18:31Z
    Missing Authorization in GitLab
    cvelistv5