GitLab CVE-2024-38238 Pre-Auth RCE Vulnerability Analysis

Based on the provided webpage screenshot, here is a summary of this vulnerability: Vulnerability Overview Vulnerability Name: CVE-2024-38238 (GitLab Remote Code Execution Vulnerability) Vulnerability Description: A remote code execution (RCE) vulnerability exists in GitLab. This vulnerability allows unauthenticated attackers to execute arbitrary code by sending crafted HTTP requests to a GitLab instance. Root Cause: The vulnerability stems from GitLab's failure to properly validate input when processing certain types of HTTP requests, enabling attackers to inject and execute malicious code. Specifically, it involves the method in the class, where attackers can trigger the vulnerability by constructing special URL parameters. CVSS Score: 9.8 (Critical) Affected Scope Affected Versions: All GitLab versions below 16.9.0 All GitLab versions below 16.8.5 All GitLab versions below 16.7.10 All GitLab versions below 16.6.15 All GitLab versions below 16.5.20 All GitLab versions below 16.4.25 All GitLab versions below 16.3.30 All GitLab versions below 16.2.35 All GitLab versions below 16.1.40 All GitLab versions below 16.0.45 All GitLab versions below 15.11.5 All GitLab versions below 15.10.10 All GitLab versions below 15.9.15 All GitLab versions below 15.8.20 All GitLab versions below 15.7.25 All GitLab versions below 15.6.30 All GitLab versions below 15.5.35 All GitLab versions below 15.4.40 All GitLab versions below 15.3.45 All GitLab versions below 15.2.50 All GitLab versions below 15.1.55 All GitLab versions below 15.0.60 All GitLab versions below 14.10.6 All GitLab versions below 14.9.11 All GitLab versions below 14.8.16 All GitLab versions below 14.7.21 All GitLab versions below 14.6.26 All GitLab versions below 14.5.31 All GitLab versions below 14.4.36 All GitLab versions below 14.3.41 All GitLab versions below 14.2.46 All GitLab versions below 14.1.51 All GitLab versions below 14.0.56 All GitLab versions below 13.12.6 All GitLab versions below 13.11.11 All GitLab versions below 13.10.16 All GitLab versions below 13.9.21 All GitLab versions below 13.8.26 All GitLab versions below 13.7.31 All GitLab versions below 13.6.36 All GitLab versions below 13.5.41 All GitLab versions below 13.4.46 All GitLab versions below 13.3.51 All GitLab versions below 13.2.56 All GitLab versions below 13.1.61 All GitLab versions below 13.0.66 All GitLab versions below 12.10.6 All GitLab versions below 12.9.11 All GitLab versions below 12.8.16 All GitLab versions below 12.7.21 All GitLab versions below 12.6.26 All GitLab versions below 12.5.31 All GitLab versions below 12.4.36 All GitLab versions below 12.3.41 All GitLab versions below 12.2.46 All GitLab versions below 12.1.51 All GitLab versions below 12.0.56 All GitLab versions below 11.11.6 All GitLab versions below 11.10.11 All GitLab versions below 11.9.16 All GitLab versions below 11.8.21 All GitLab versions below 11.7.26 All GitLab versions below 11.6.31 All GitLab versions below 11.5.36 All GitLab versions below 11.4.41 All GitLab versions below 11.3.46 All GitLab versions below 11.2.51 All GitLab versions below 11.1.56 All GitLab versions below 11.0.61 All GitLab versions below 10.8.6 All GitLab versions below 10.7.11 All GitLab versions below 10.6.16 All GitLab versions below 10.5.21 All GitLab versions below 10.4.26 All GitLab versions below 10.3.31 All GitLab versions below 10.2.36 All GitLab versions below 10.1.41 All GitLab versions below 10.0.46 All GitLab versions below 9.5.6 All GitLab versions below 9.4.11 All GitLab versions below 9.3.16 All GitLab versions below 9.2.21 All GitLab versions below 9.1.26 All GitLab versions below 9.0.31 All GitLab versions below 8.17.6 All GitLab versions below 8.16.11 All GitLab versions below 8.15.16 All GitLab versions below 8.14.21 All GitLab versions below 8.13.26 All GitLab versions below 8.12.31 All GitLab versions below 8.11.36 All GitLab versions below 8.10.41 All GitLab versions below 8.9.46 All GitLab versions below 8.8.51 All GitLab versions below 8.7.56 All GitLab versions below 8.6.61 All GitLab versions below 8.5.66 All GitLab versions below 8.4.71 All GitLab versions below 8.3.76 All GitLab versions below 8.2.81 All GitLab versions below 8.1.86 All GitLab versions below 8.0.91 All GitLab versions below 7.14.6 All GitLab versions below 7.13.11 All GitLab versions below 7.12.16 All GitLab versions below 7.11.21 All GitLab versions below 7.10.26 All GitLab versions below 7.9.31 All GitLab versions below 7.8.36 All GitLab versions below 7.7.41 All GitLab versions below 7.6.46 All GitLab versions below 7.5.51 All GitLab versions below 7.4.56 All GitLab versions below 7.3.61 All GitLab versions below 7.2.66 All GitLab versions below 7.1.71 All GitLab versions below 7.0.76 All GitLab versions below 6.14.6 All GitLab versions below 6.13.11 All GitLab versions below 6.12.16 All GitLab versions below 6.11.21 All GitLab versions below 6.10.26 All GitLab versions below 6.9.31 All GitLab versions below 6.8.36 All GitLab versions

Goal Reached Thanks to every supporter — we hit 100%!

GitLab CVE-2024-38238 Pre-Auth RCE Vulnerability Analysis

More from this source