Vulnerabilitycritical

Self-managed GitLab installations should be patched again (CVE-2024-0402)

Help Net Securityby @zeljkazorzJan 30, 2024 · 00:00 UTC (Jan 30, 2024)1 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2024-0402 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-0402 CVE-2023-5933 CVE-2023-5612 CVE-2023-6159 CVE-2024-0456

Tags: cve-2024-0402 cve-2023-5933 cve-2023-5612 cve-2023-6159 cve-2024-0456 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-0402 +4 related CVEs CVE-2023-6159 CVE-2023-5933 CVE-2023-5612 CVE-2024-0456	An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an…	9.9 group max	4%		Jan 26, 2024

From the original article

1 min read at helpnetsecurity.com

Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has patched a critical vulnerability (CVE-2024-0402) in GitLab CE/EE again and is urging users to update their installations immediately. GitLab Inc.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.