Skip to content
NewA calmer, faster ZeroHour
Vulnerability3

CVE-2024-5257

CVSS 3.1
2.7 low
EPSS
<1%p35
Published
·
Modified
Analyze CVE-2024-5257 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.0.4 and from 17.1 prior to 17.1.2 where a Developer user with `admin_compliance_framework` custom role may have been able to modify the URL for a group namespace.

Vendors
gitlab
Products
gitlab
Weakness
CWE-284
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news

1 story