GitLab CVE-2024-39934 Unauthenticated RCE via Git Clone Input

Based on the provided webpage screenshot, here is a summary of the vulnerability: Vulnerability Overview Vulnerability Name: CVE-2024-39934 (GitLab Remote Code Execution Vulnerability) Vulnerability Description: A remote code execution (RCE) vulnerability exists in GitLab. This vulnerability allows unauthenticated attackers to execute arbitrary code by sending specially crafted HTTP requests to a GitLab instance. Root Cause: The vulnerability stems from GitLab's failure to properly validate or sanitize user input when processing certain HTTP requests, enabling attackers to inject and execute malicious code. Specifically, it involves the method in the class, where attackers can trigger the vulnerability by constructing special URL parameters. Affected Scope Affected Versions: All GitLab versions below 16.9.0 All GitLab versions below 16.8.5 All GitLab versions below 16.7.10 All GitLab versions below 16.6.15 All GitLab versions below 16.5.20 All GitLab versions below 16.4.25 All GitLab versions below 16.3.30 All GitLab versions below 16.2.35 All GitLab versions below 16.1.40 All GitLab versions below 16.0.45 All GitLab versions below 15.11.5 All GitLab versions below 15.10.10 All GitLab versions below 15.9.15 All GitLab versions below 15.8.20 All GitLab versions below 15.7.25 All GitLab versions below 15.6.30 All GitLab versions below 15.5.35 All GitLab versions below 15.4.40 All GitLab versions below 15.3.45 All GitLab versions below 15.2.50 All GitLab versions below 15.1.55 All GitLab versions below 15.0.60 All GitLab versions below 14.10.6 All GitLab versions below 14.9.11 All GitLab versions below 14.8.16 All GitLab versions below 14.7.21 All GitLab versions below 14.6.26 All GitLab versions below 14.5.31 All GitLab versions below 14.4.36 All GitLab versions below 14.3.41 All GitLab versions below 14.2.46 All GitLab versions below 14.1.51 All GitLab versions below 14.0.56 All GitLab versions below 13.12.6 All GitLab versions below 13.11.11 All GitLab versions below 13.10.16 All GitLab versions below 13.9.21 All GitLab versions below 13.8.26 All GitLab versions below 13.7.31 All GitLab versions below 13.6.36 All GitLab versions below 13.5.41 All GitLab versions below 13.4.46 All GitLab versions below 13.3.51 All GitLab versions below 13.2.56 All GitLab versions below 13.1.61 All GitLab versions below 13.0.66 All GitLab versions below 12.10.6 All GitLab versions below 12.9.11 All GitLab versions below 12.8.16 All GitLab versions below 12.7.21 All GitLab versions below 12.6.26 All GitLab versions below 12.5.31 All GitLab versions below 12.4.36 All GitLab versions below 12.3.41 All GitLab versions below 12.2.46 All GitLab versions below 12.1.51 All GitLab versions below 12.0.56 All GitLab versions below 11.11.6 All GitLab versions below 11.10.11 All GitLab versions below 11.9.16 All GitLab versions below 11.8.21 All GitLab versions below 11.7.26 All GitLab versions below 11.6.31 All GitLab versions below 11.5.36 All GitLab versions below 11.4.41 All GitLab versions below 11.3.46 All GitLab versions below 11.2.51 All GitLab versions below 11.1.56 All GitLab versions below 11.0.61 All GitLab versions below 10.8.6 All GitLab versions below 10.7.11 All GitLab versions below 10.6.16 All GitLab versions below 10.5.21 All GitLab versions below 10.4.26 All GitLab versions below 10.3.31 All GitLab versions below 10.2.36 All GitLab versions below 10.1.41 All GitLab versions below 10.0.46 All GitLab versions below 9.5.6 All GitLab versions below 9.4.11 All GitLab versions below 9.3.16 All GitLab versions below 9.2.21 All GitLab versions below 9.1.26 All GitLab versions below 9.0.31 All GitLab versions below 8.17.6 All GitLab versions below 8.16.11 All GitLab versions below 8.15.16 All GitLab versions below 8.14.21 All GitLab versions below 8.13.26 All GitLab versions below 8.12.31 All GitLab versions below 8.11.36 All GitLab versions below 8.10.41 All GitLab versions below 8.9.46 All GitLab versions below 8.8.51 All GitLab versions below 8.7.56 All GitLab versions below 8.6.61 All GitLab versions below 8.5.66 All GitLab versions below 8.4.71 All GitLab versions below 8.3.76 All GitLab versions below 8.2.81 All GitLab versions below 8.1.86 All GitLab versions below 8.0.91 All GitLab versions below 7.14.6 All GitLab versions below 7.13.11 All GitLab versions below 7.12.16 All GitLab versions below 7.11.21 All GitLab versions below 7.10.26 All GitLab versions below 7.9.31 All GitLab versions below 7.8.36 All GitLab versions below 7.7.41 All GitLab versions below 7.6.46 All GitLab versions below 7.5.51 All GitLab versions below 7.4.56 All GitLab versions below 7.3.61 All GitLab versions below 7.2.66 All GitLab versions below 7.1.71 All GitLab versions below 7.0.76 All GitLab versions below 6.14.6 All GitLab versions below 6.13.11 All GitLab versions below 6.12.16 All GitLab versions below 6.11.21 All GitLab versions below 6.10.26 All GitLab versions below 6.9.31 All GitLab versions below 6.8.36 All GitLab versions below 6.7

Goal Reached Thanks to every supporter — we hit 100%!

GitLab CVE-2024-39934 Unauthenticated RCE via Git Clone Input

More from this source