CVE-2024-0402
published 2024-01-26CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an…
PriorityP263critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
3.30%
87.0th percentile
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 16.6.6-1 (sid) | gitlab 16.6.6-1 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 16.0 < 16.5.8 | 16.5.8 |
| gitlab | gitlab | >= 16.0.0 < 16.5.8 | 16.5.8 |
| gitlab | gitlab | >= 16.6 < 16.6.6 | 16.6.6 |
| gitlab | gitlab | >= 16.6.0 < 16.6.6 | 16.6.6 |
| gitlab | gitlab | >= 16.7 < 16.7.4 | 16.7.4 |
| gitlab | gitlab | >= 16.7.0 < 16.7.4 | 16.7.4 |
| gitlab | gitlab | >= 16.8 < 16.8.1 | 16.8.1 |
| gitlab | gitlab_ce | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerability allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace — monitor for unexpected file writes outside of expected workspace directories during workspace creation operations. ↗
- →Affected GitLab CE/EE versions: 16.0 up to (not including) 16.6.6, 16.7 up to (not including) 16.7.4, and 16.8 up to (not including) 16.8.1 — flag unpatched instances in asset inventory. ↗
- →CVSS score of 9.9 (critical) — prioritize detection and patching of GitLab instances in this version range. ↗
- ·Exploitation requires an authenticated user — unauthenticated access alone is insufficient to trigger this vulnerability. ↗
- ·Debian sid resolves the issue with package version 16.6.6-1; other distributions may have different fix packaging. ↗
CVSS provenance
nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
osv9.9CRITICAL
vendor_debian9.9CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which al
vendor_gitlab·2024-01-26·CVSS 9.9
CVE-2024-0402 [CRITICAL] CWE-22 CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which al
CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
Debian
CVE-2024-0402: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 pr...
vendor_debian·2024·CVSS 9.9
CVE-2024-0402 [CRITICAL] CVE-2024-0402: gitlab - An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 pr...
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
Scope: local
sid: resolved (fixed in 16.6.6-1)
OSV
CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16
osv·2024-01-26·CVSS 9.9
CVE-2024-0402 [CRITICAL] CVE-2024-0402: An issue has been discovered in GitLab CE/EE affecting all versions from 16
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
GHSA
GHSA-3hm6-rvrr-hc6r: An issue has been discovered in GitLab CE/EE affecting all versions from 16
ghsa_unreviewed·2024-01-26
CVE-2024-0402 [CRITICAL] CWE-22 GHSA-3hm6-rvrr-hc6r: An issue has been discovered in GitLab CE/EE affecting all versions from 16
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace.
No detection rules found.
No public exploits indexed.
2024-01-26
Published