CVE-2024-4784

—

CVSS 3.1

5.4 medium

EPSS

<1%p19

Published

Aug 8, 2024 (Aug 8, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in GitLab EE starting from version 16.7 before 17.0.6, version 17.1 before 17.1.4 and 17.2 before 17.2.2 that allowed bypassing the password re-entry requirement to approve a policy.

Vendors: gitlab
Products: gitlab
Weakness: CWE-305, CWE-287
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.