Vulnerability Description
A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A user assigned the Admin Group Member custom role could have escalated their privileges to include other custom roles.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gitlab | Gitlab | >= 16.6.0, < 17.1.7 |
Related Weaknesses (CWE)
References
- https://gitlab.com/gitlab-org/gitlab/-/issues/462665Broken Link
- https://hackerone.com/reports/2478469Permissions Required
- https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-release
FAQ
What is CVE-2024-8631?
CVE-2024-8631 is a vulnerability with a CVSS score of 5.5 (MEDIUM). A privilege escalation issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. A user assigned the A...
How severe is CVE-2024-8631?
CVE-2024-8631 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-8631?
Check the references section above for vendor advisories and patch information. Affected products include: Gitlab Gitlab.