VULNERABILITY INTELLIGENCE

CVE-2024-6323

CVSS score7.5 HIGH
EPSS probability0.52%
CISA KEVNot currently listed
Published2024-06-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Improper authorization in global search in GitLab EE affecting all versions from 16.11 prior to 16.11.5 and 17.0 prior to 17.0.3 and 17.1 prior to 17.1.1 allows an attacker leak content of a private repository in a public project.

Weakness classification

  • cve@gitlab.com: CWE-863
  • nvd@nist.gov: CWE-863

Primary references