CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects GitLab.
CVE
CVE-2024-1250
Severity
MEDIUM
CVSS
6.5
EPSS
0.55%
GitLab
Original NVD Description
An issue has been discovered in GitLab EE affecting all versions starting from 16.8 before 16.8.2. When a user is assigned a custom role with manage_group_access_tokens permission, they may be able to create group access tokens with Owner privileges, which may lead to privilege escalation.
Related CVEs
Other vulnerabilities affecting the same vendor(s)