| Summary | An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 17.1.6, all versions starting from 17.2 before 17.2.4, all versions starting from 17.3 before 17.3.1. Under certain conditions it may be possible to bypass the IP restriction for groups through GraphQL allowing unauthorised users to perform some actions at the group level. |
|---|---|
| Publication Date | Aug. 23, 2024, 1:15 a.m. |
| Registration Date | Aug. 26, 2024, 4:57 p.m. |
| Last Update | Aug. 24, 2024, 1:18 a.m. |
| Title | GitLab.org の GitLab における不正な認証に関する脆弱性 |
|---|---|
| Summary | GitLab.org の GitLab には、不正な認証に関する脆弱性が存在します。 |
| Possible impacts | 情報を改ざんされる可能性があります。 |
| Solution | 参考情報を参照して適切な対策を実施してください。 |
| Publication Date | Aug. 22, 2024, midnight |
| Registration Date | Dec. 16, 2024, 9:54 a.m. |
| Last Update | Dec. 16, 2024, 9:54 a.m. |
| GitLab.org |
| GitLab 12.5.0 以上 17.1.6 未満 |
| GitLab 17.2.0 以上 17.2.4 未満 |
| GitLab 17.3.0 |
| No | Changed Details | Date of change |
|---|---|---|
| 1 | [2024年12月16日] 掲載 |
Dec. 16, 2024, 9:54 a.m. |