CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2024-11931: Insufficient Granularity of Access Control in GitLab
6.4
CVSS
Description
An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.6.4, from 17.7 prior to 17.7.3, and from 17.8 prior to 17.8.1. Under certain conditions, it may have been possible for users with developer role to exfiltrate protected CI variables via CI lint.
Classification
CVE ID: CVE-2024-11931
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.4
Affected Products
Vendor: GitLab
Product: GitLab
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-21 (when was this score calculated)