CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects GitLab.
CVE
CVE-2024-1299
Severity
MEDIUM
CVSS
6.5
EPSS
0.54%
GitLab
Original NVD Description
A privilege escalation vulnerability was discovered in GitLab affecting versions 16.8 prior to 16.8.4 and 16.9 prior to 16.9.2. It was possible for a user with custom role of `manage_group_access_tokens` to rotate group access tokens with owner privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)