CVE-2024-9623: Incorrect Authorization in GitLab
An issue was discovered in GitLab CE/EE affecting all versions starting from 8.16 prior to 17.2.9, starting from 17.3 prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows deploy keys to push to an archived repository.
Affected Software
Remediation
Information
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-9623?
CVE-2024-9623 is considered a high severity vulnerability due to the potential unauthorized access to archived repositories.
How do I fix CVE-2024-9623?
To fix CVE-2024-9623, update GitLab to versions 17.2.9, 17.3.5, or 17.4.2 or later.
What versions of GitLab are affected by CVE-2024-9623?
CVE-2024-9623 affects all GitLab CE/EE versions from 8.16 to before 17.2.9, from 17.3 to before 17.3.5, and from 17.4 to before 17.4.2.
What is the impact of CVE-2024-9623?
The impact of CVE-2024-9623 allows deploy keys to push changes to archived repositories, which could lead to unauthorized data alterations.
Who is affected by CVE-2024-9623?
CVE-2024-9623 affects users of GitLab CE/EE who are running vulnerable versions as specified in the advisory.