CVE-2024-6446

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-6446

Severity

3.5

Low

CVSS V3

Summary

Business Logic Errors in GitLab

Description

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application.

References

https://images.chainguard.dev/security/CGA-x5cq-pxx3-5448
https://github.com/advisories/GHSA-xh98-rwp8-8rpw
https://images.chainguard.dev/security/CGA-97j8-2qv7-whqp
https://images.chainguard.dev/security/CGA-5p97-j998-x6vp
https://images.chainguard.dev/security/CGA-hf65-g974-3fvv
https://images.chainguard.dev/security/CGA-g6r7-p8w5-mg9r
https://images.chainguard.dev/security/CGA-5qq3-ggxm-fj67
https://images.chainguard.dev/security/CGA-qxv9-552m-5wwp
https://images.chainguard.dev/security/CGA-fqhf-2v3g-x6w9
https://images.chainguard.dev/security/git%3A%2F%2Fgit%40gitlab.com%3Agitlab-org%2Fgitlab.git
https://about.gitlab.com/releases/2024/09/11/patch-release-gitlab-17-3-2-released/
https://gitlab.com/gitlab-org/gitlab/-/issues/470144
https://hackerone.com/reports/2573481

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CVE-2024-6446

Severity

Summary

Description

References

Affected packages

The trusted source for open source

Product

Solutions

Customers

Resources

Company