CVE-2024-11669

Published: 2024-11-26T19:15Z

Last Modified: 2024-12-12T21:11Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt