CVE-2024-4024

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-4024
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-4024.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-4024
Aliases
Downstream
Published
2024-04-25T13:30:46.597Z
Modified
2025-12-01T05:44:18.534891Z
Severity
  • 7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Authentication Bypass by Assumed-Immutable Data in GitLab
Details

An issue has been discovered in GitLab CE/EE affecting all versions starting from 7.8 before 16.9.6, all versions starting from 16.10 before 16.10.4, all versions starting from 16.11 before 16.11.1. Under certain conditions, an attacker with their Bitbucket account credentials may be able to take over a GitLab account linked to another user's Bitbucket account, if Bitbucket is used as an OAuth 2.0 provider on GitLab.

Database specific 
{
    "cna_assigner": "GitLab",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/4xxx/CVE-2024-4024.json",
    "cwe_ids": [
        "CWE-302"
    ]
}
References

Affected packages

Git / gitlab.com/gitlab-org/gitlab

Affected ranges

Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
27251058e9bc671de170091fb608bcdd655131ad
Fixed
37be6ae4d071c237cf140e2b206ad4062adefcd1
Database specific 
{
    "versions": [
        {
            "introduced": "7.8"
        },
        {
            "fixed": "16.9.6"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
053df647320e7cac5c255f9e07264a0c35548409
Fixed
eb1786335068274ac755a5dd5aaf2dda526b20f5
Database specific 
{
    "versions": [
        {
            "introduced": "16.10"
        },
        {
            "fixed": "16.10.4"
        }
    ]
}
Type
GIT
Repo
https://gitlab.com/gitlab-org/gitlab
Events
Introduced
22834294718a25956b0a859c8eed72248300eeee
Fixed
5f640bd48cc7c82e4d59b201e4bad789caa71047
Database specific 
{
    "versions": [
        {
            "introduced": "16.11"
        },
        {
            "fixed": "16.11.1"
        }
    ]
}

Affected versions

v16.*

v16.10.0-ee
v16.10.1-ee
v16.10.2-ee
v16.10.3-ee
v16.11.0-ee