CVE-2024-5258

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p20

Published

May 23, 2024 (May 23, 2024)

Modified

Jun 17, 2026

Description

An authorization vulnerability exists within GitLab from versions 16.10 before 16.10.6, 16.11 before 16.11.3, and 17.0 before 17.0.1 where an authenticated attacker could utilize a crafted naming convention to bypass pipeline authorization logic.

Vendors: gitlab
Products: gitlab
Weakness: CWE-639, CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.