1. CVE-Search
  2. CVE-2024-5257
ID CVE-2024-5257
Summary An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the URL for a group namespace.
References
Vulnerable Configurations
  • cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.1.1:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.1.1:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.1.0:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.1.1:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.1.1:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.1:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.1:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.2:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.2:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.3:*:*:*:community:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.3:*:*:*:community:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.0:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.1:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.1:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.2:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.2:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:gitlab:gitlab:17.0.3:*:*:*:enterprise:*:*:*
    cpe:2.3:a:gitlab:gitlab:17.0.3:*:*:*:enterprise:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 12-07-2024 - 16:54
Published 11-07-2024 - 07:15
Last modified 12-07-2024 - 16:54
Back to Top