CVE-2024-9512CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

Medium · published June 12, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Weakness
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition
Published
2025-06-12T14:02Z
EPSS history
Timeline
  • 12 JUN 14:02Z
    Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
    cvelistv5