Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2024-1347

Published: 25/04/2024 Updated: 25/04/2024

Vulnerability Summary

An issue has been discovered in GitLab CE/EE affecting all versions prior to 16.9.6, all versions starting from 16.10 prior to 16.10.4, all versions starting from 16.11 prior to 16.11.1. Under certain conditions, an attacker through a crafted email address may be able to bypass domain based restrictions on an instance or a group.

Vendor Advisories

Red Hat:
Description<!---->This CVE is under investigation by Red Hat Product Security ...

References

https://gitlab.com/gitlab-org/gitlab/-/issues/441093https://hackerone.com/reports/2355565https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2024-1347
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4654CVE-2023-49606encryptionNULL pointer dereferenceCVE-2024-4439CVE-2024-4649race conditionCVE-2024-27202CVE-2024-34566
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook