CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.4. It affects GitLab. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-5258
Severity
MEDIUM
CVSS
4.4
EPSS
0.27%
GitLab
Original NVD Description
An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.
Related CVEs
Other vulnerabilities affecting the same vendor(s)