Vulnerability Description
An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.
CVSS Score
4.2
MEDIUM
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | >= 16.7.0, < 17.0.6 |
Related Weaknesses (CWE)
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/461248Broken Link
- https://hackerone.com/reports/2486223Permissions Required
FAQ
What is CVE-2024-4784?
CVE-2024-4784 is a vulnerability with a CVSS score of 4.2 (MEDIUM). An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a p...
How severe is CVE-2024-4784?
CVE-2024-4784 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-4784?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.