CVE-2024-12431: Missing Authorization in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-12431?
CVE-2024-12431 is classified as a high severity vulnerability due to its potential for unauthorized access and manipulation by users.
How do I fix CVE-2024-12431?
To remediate CVE-2024-12431, upgrade GitLab CE/EE to versions 17.5.5, 17.6.3, or 17.7.1 or later.
What kind of access does CVE-2024-12431 exploit?
CVE-2024-12431 exploits unauthorized user access to manipulate the status of issues in public GitLab projects.
Which GitLab versions are affected by CVE-2024-12431?
CVE-2024-12431 affects all GitLab CE/EE versions from 15.5 up to 17.5.5, 17.6 up to 17.6.3, and 17.7 up to 17.7.1.
Are private projects affected by CVE-2024-12431?
No, CVE-2024-12431 specifically affects public projects where unauthorized users can manipulate issue statuses.