UBUNTU-CVE-2024-12431
- Source
- https://ubuntu.com/security/CVE-2024-12431
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-12431.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2024-12431
- Related
- Published
- 2025-01-08T21:15:00Z
- Modified
- 2025-01-17T08:21:41Z
- Summary
- [none]
- Details
-
An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.
- References
-
- https://ubuntu.com/security/CVE-2024-12431
- https://www.cve.org/CVERecord?id=CVE-2024-12431
- https://about.gitlab.com/releases/2025/01/08/patch-release-gitlab-17-7-1-released/#unauthorized-user-can-manipulate-status-of-issues-in-public-projects
- https://gitlab.com/gitlab-org/gitlab/-/issues/508742
- https://hackerone.com/reports/2877710