CVE-2024-6502

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-6502

Severity

5.7

Medium

CVSS V3

Summary

Incorrect Provision of Specified Functionality in GitLab

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and starting from 17.3 prior to 17.3.1, which allows an attacker to create a branch with the same name as a deleted tag.