CVE-2024-3959
published 2024-06-27CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1…
PriorityP339medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.43%
34.3th percentile
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gitlab | < gitlab 17.3.5-2 (sid) | gitlab 17.3.5-2 (sid) |
| gitlab | gitlab | — | — |
| gitlab | gitlab | — | — |
| gitlab | gitlab | >= 16.7 < 16.11.5 | 16.11.5 |
| gitlab | gitlab | >= 16.7.0 < 16.11.5 | 16.11.5 |
| gitlab | gitlab | >= 17.0 < 17.0.3 | 17.0.3 |
| gitlab | gitlab | >= 17.0.0 < 17.0.3 | 17.0.3 |
| gitlab | gitlab | >= 17.1 < 17.1.1 | 17.1.1 |
| gitlab | gitlab_ce | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
osv6.5MEDIUM
vendor_debian6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GitLab
CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting f
vendor_gitlab·2024-06-27·CVSS 6.5
CVE-2024-3959 [MEDIUM] CWE-285 CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting f
CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
Debian
CVE-2024-3959: gitlab - An issue was discovered in GitLab CE/EE affecting all versions starting from 16....
vendor_debian·2024·CVSS 6.5
CVE-2024-3959 [MEDIUM] CVE-2024-3959: gitlab - An issue was discovered in GitLab CE/EE affecting all versions starting from 16....
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
Scope: local
sid: resolved (fixed in 17.3.5-2)
OSV
CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16
osv·2024-06-27·CVSS 6.5
CVE-2024-3959 [MEDIUM] CVE-2024-3959: An issue was discovered in GitLab CE/EE affecting all versions starting from 16
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
GHSA
GHSA-mmw4-rfwh-wm5m: An issue was discovered in GitLab CE/EE affecting all versions starting from 16
ghsa_unreviewed·2024-06-27
CVE-2024-3959 [MEDIUM] CWE-285 GHSA-mmw4-rfwh-wm5m: An issue was discovered in GitLab CE/EE affecting all versions starting from 16
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.7 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows private job artifacts can be accessed by any user.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-06-27
Published