AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2024-5430

MEDIUM · CVSS 6.8 EPSS 0.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-06-27 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It affects GitLab.

CVE
CVE-2024-5430
Severity
MEDIUM
CVSS
6.8
EPSS
0.49%
GitLab

Original NVD Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.10 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows a project maintainer can delete the merge request approval policy via graphQL.

Related CVEs

Other vulnerabilities affecting the same vendor(s)