BIT-gitlab-2024-9512
See a problem?- Import Source
- https://github.com/bitnami/vulndb/tree/main/data/gitlab/BIT-gitlab-2024-9512.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/BIT-gitlab-2024-9512
- Aliases
- Published
- 2025-06-14T06:14:22.639Z
- Modified
- 2025-08-11T00:06:06.142Z
- Summary
- Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab
- Details
-
An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.
- Database specific
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*" ] }- References
Affected packages
Bitnami / gitlab
Package
- Name
- gitlab
- Purl
- pkg:bitnami/gitlab
Severity
- 5.9 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator