CVE-2024-12619: Insufficient Granularity of Access Control in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-12619?
CVE-2024-12619 is rated as a high severity vulnerability due to the potential for unauthorized access to internal projects.
How do I fix CVE-2024-12619?
To fix CVE-2024-12619, update GitLab CE/EE to versions 17.8.6, 17.9.3, or 17.10.1 or later.
Who is affected by CVE-2024-12619?
CVE-2024-12619 affects all users of GitLab CE/EE from versions 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1.
What does CVE-2024-12619 allow an attacker to do?
CVE-2024-12619 allows internal users to gain unauthorized access to internal projects, posing a significant risk to project confidentiality.
When was CVE-2024-12619 disclosed?
CVE-2024-12619 was disclosed as part of a vulnerability report on GitLab, highlighting security flaws in their software.