- Description
- An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker with access to a victim's Personal Access Token (PAT) to escalate privileges.
- Source
- cve@gitlab.com
- NVD status
- Analyzed
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
- cve@gitlab.com
- CWE-862
- nvd@nist.gov
- NVD-CWE-noinfo
- Hype score
- Not currently trending
به روزرسانی GITLAB برای پچ آسیب پذیری CVE-2024-8114 https://t.co/h0gC28uxfr
@vulnerbyte
10 Dec 2024
38 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
به تازگی آسیب پذیری جدیدی با کد شناسایی CVE-2024-8114 برای GITLAB منتشر شده است که باعث privilege escalation می شود. Gitlab برای این آسیب پذیری پچ لازم را ارائه داده است . https://t.co/Poz3aKY03t https://t.co/7QsnqGgYpV
@AmirHossein_sec
2 Dec 2024
52 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Gitlab fixes multiple vulnerabilities including CVE-2024-8114 #Gitlab #CVE-2024-8114 https://t.co/0usFcnAPpH
@pravin_karthik
27 Nov 2024
60 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨Alert🚨CVE-2024-8114: GitLab Vulnerability Allows Privilege Escalation 📊 3.7M+ Services are found on https://t.co/ysWb28BTvF yearly. 🔗Hunter Link: https://t.co/lEH86BBQp7 👇Query HUNTER:/product.name="GitLab" SHODAN: http.component:"GitLab" FOFA: app="GitLab" 📰Refer:… https:
@HunterMapping
27 Nov 2024
4123 Impressions
12 Retweets
46 Likes
12 Bookmarks
1 Reply
1 Quote
CVE-2024-8114 and others: Multiple vulns in GitLab, 4.2 - 8.2 rating❗️ GitLab has posted an advisory about several vulns: Privilege Escalation, DoS, Auth Bypass, etc. Search at https://t.co/hv7QKSqxTR: 👉 Link: https://t.co/8vjKZIj0Vh #cybersecurity #vulnerability_map #gitlab
@Netlas_io
27 Nov 2024
822 Impressions
3 Retweets
11 Likes
1 Bookmark
0 Replies
0 Quotes
CVE-2024-8114: GitLab Vulnerability Allows Privilege Escalation https://t.co/OOGSxevbt6
@Dinosn
27 Nov 2024
2621 Impressions
7 Retweets
18 Likes
6 Bookmarks
0 Replies
0 Quotes
CVE-2024-8114 An issue has been discovered in GitLab CE/EE affecting all versions from 8.12 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. This issue allows an attacker w… https://t.co/f99qpqvfHt
@CVEnew
26 Nov 2024
389 Impressions
1 Retweet
1 Like
1 Bookmark
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D229997A-33B2-44AC-A257-61E00353019C",
"versionEndExcluding": "17.4.5",
"versionStartIncluding": "8.12.0"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8AA194ED-6663-4D99-90C7-4CDBCAF0AE12",
"versionEndExcluding": "17.4.5",
"versionStartIncluding": "8.12.0"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C1F85A0-709A-4C88-9C40-93D3C47AFD54",
"versionEndExcluding": "17.5.3",
"versionStartIncluding": "17.5.0"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "305F5CB5-5B11-4AA7-ABAE-D4B9A05F6B4A",
"versionEndExcluding": "17.5.3",
"versionStartIncluding": "17.5.0"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:17.6.0:*:*:*:community:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A39B04B-D109-467A-82E1-3FE6CBA48FEE"
},
{
"criteria": "cpe:2.3:a:gitlab:gitlab:17.6.0:*:*:*:enterprise:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1212AE23-98AB-4E7A-AAB5-0AD266DFC7D4"
}
],
"operator": "OR"
}
]
}
]