by Kastro
Paper/Archive/CVE-2024-0402

CVE-2024-0402

GitLab GitLab — Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

EPSS 4%public exploitCVSS 9.9
critical.is priorityof 100
58
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 90.0.900 × 2018.0Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.

Affected

ProductAffectedFixed inSource
GitLab16.0 – < 16.5.816.5.8CNA
GitLab16.6 – < 16.6.616.6.6CNA
GitLab16.7 – < 16.7.416.7.4CNA
GitLab16.8 – < 16.8.116.8.1CNA

Scores by source

GitLab (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refabout.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-releasedrefgitlab.com/gitlab-org/gitlab/-/issues/437819