vulnerability

FreeBSD: VID-bcc8b21e-7122-11ef-bece-2cf05da270f3 (CVE-2024-8311): Gitlab -- vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:S/C:N/I:C/A:N)

Published

Sep 12, 2024

Added

Sep 13, 2024

Modified

Jun 15, 2026

Description

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

Solutions

freebsd-upgrade-package-gitlab-cefreebsd-upgrade-package-gitlab-ee

References

CVE-2024-8311
https://attackerkb.com/topics/CVE-2024-8311
CWE-424
EUVD-EUVD-2024-49082
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49082

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report