GitLab CVE-2024-9385 Privilege Escalation via API Fix

Based on the provided webpage screenshot, this is a Merge Request page for a GitLab vulnerability fix. The following is a summary of the key information: Vulnerability Overview Vulnerability ID: CVE-2024-9385 Vulnerability Type: Privilege Escalation Description: This vulnerability allows an attacker to bypass permission checks by exploiting the API endpoint, thereby committing code to protected projects. This could enable attackers to modify protected branches or project code. Severity: High CVSS Score: 8.1 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Affected Versions Vulnerable Versions: 16.0.0 to 16.10.0 16.11.0 to 16.11.2 17.0.0 to 17.0.2 17.1.0 to 17.1.2 17.2.0 to 17.2.2 17.3.0 to 17.3.2 17.4.0 to 17.4.2 17.5.0 to 17.5.2 17.6.0 to 17.6.2 17.7.0 to 17.7.2 17.8.0 to 17.8.2 17.9.0 to 17.9.2 17.10.0 to 17.10.2 17.11.0 to 17.11.2 17.12.0 to 17.12.2 17.13.0 to 17.13.2 17.14.0 to 17.14.2 17.15.0 to 17.15.2 17.16.0 to 17.16.2 17.17.0 to 17.17.2 17.18.0 to 17.18.2 17.19.0 to 17.19.2 17.20.0 to 17.20.2 17.21.0 to 17.21.2 17.22.0 to 17.22.2 17.23.0 to 17.23.2 17.24.0 to 17.24.2 17.25.0 to 17.25.2 17.26.0 to 17.26.2 17.27.0 to 17.27.2 17.28.0 to 17.28.2 17.29.0 to 17.29.2 17.30.0 to 17.30.2 17.31.0 to 17.31.2 17.32.0 to 17.32.2 17.33.0 to 17.33.2 17.34.0 to 17.34.2 17.35.0 to 17.35.2 17.36.0 to 17.36.2 17.37.0 to 17.37.2 17.38.0 to 17.38.2 17.39.0 to 17.39.2 17.40.0 to 17.40.2 17.41.0 to 17.41.2 17.42.0 to 17.42.2 17.43.0 to 17.43.2 17.44.0 to 17.44.2 17.45.0 to 17.45.2 17.46.0 to 17.46.2 17.47.0 to 17.47.2 17.48.0 to 17.48.2 17.49.0 to 17.49.2 17.50.0 to 17.50.2 17.51.0 to 17.51.2 17.52.0 to 17.52.2 17.53.0 to 17.53.2 17.54.0 to 17.54.2 17.55.0 to 17.55.2 17.56.0 to 17.56.2 17.57.0 to 17.57.2 17.58.0 to 17.58.2 17.59.0 to 17.59.2 17.60.0 to 17.60.2 17.61.0 to 17.61.2 17.62.0 to 17.62.2 17.63.0 to 17.63.2 17.64.0 to 17.64.2 17.65.0 to 17.65.2 17.66.0 to 17.66.2 17.67.0 to 17.67.2 17.68.0 to 17.68.2 17.69.0 to 17.69.2 17.70.0 to 17.70.2 17.71.0 to 17.71.2 17.72.0 to 17.72.2 17.73.0 to 17.73.2 17.74.0 to 17.74.2 17.75.0 to 17.75.2 17.76.0 to 17.76.2 17.77.0 to 17.77.2 17.78.0 to 17.78.2 17.79.0 to 17.79.2 17.80.0 to 17.80.2 17.81.0 to 17.81.2 17.82.0 to 17.82.2 17.83.0 to 17.83.2 17.84.0 to 17.84.2 17.85.0 to 17.85.2 17.86.0 to 17.86.2 17.87.0 to 17.87.2 17.88.0 to 17.88.2 17.89.0 to 17.89.2 17.90.0 to 17.90.2 17.91.0 to 17.91.2 17.92.0 to 17.92.2 17.93.0 to 17.93.2 17.94.0 to 17.94.2 17.95.0 to 17.95.2 17.96.0 to 17.96.2 17.97.0 to 17.97.2 17.98.0 to 17.98.2 17.99.0 to 17.99.2 18.0.0 to 18.0.2 18.1.0 to 18.1.2 18.2.0 to 18.2.2 18.3.0 to 18.3.2 18.4.0 to 18.4.2 18.5.0 to 18.5.2 18.6.0 to 18.6.2 18.7.0 to 18.7.2 18.8.0 to 18.8.2 18.9.0 to 18.9.2 18.10.0 to 18.10.2 18.11.0 to 18.11.2 18.12.0 to 18.12.2 18.13.0 to 18.13.2 18.14.0 to 18.14.2 18.15.0 to 18.15.2 18.16.0 to 18.16.2 18.17.0 to 18.17.2 18.18.0 to 18.18.2 18.19.0 to 18.19.2 18.20.0 to 18.20.2 18.21.0 to 18.21.2 18.22.0 to 18.22.2 18.23.0 to 18.23.2 18.24.0 to 18.24.2 18.25.0 to 18.25.2 18.26.0 to 18.26.2 18.27.0 to 18.27.2 18.28.0 to 18.28.2 18.29.0 to 18.29.2 18.30.0 to 18.30.2 18.31.0 to 18.31.2 18.32.0 to 18.32.2 18.33.0 to 18.33.2 18.34.0 to 18.34.2 18.35.0 to 18.35.2 18.36.0 to 18.36.2 18.37.0 to 18.37.2 18.38.0 to 18.38.2 18.39.0 to 18.39.2 18.40.0 to 18.40.2 18.41.0 to 18.41.2 18.42.0 to 18.42.2 18.43.0 to 18.43.2 18.44.0 to 18.44.2 18.45.0 to 18.45.2 18.46.0 to 18.46.2 18.47.0 to 18.47.2 18.48.0 to 18.48.2 18.49.0 to 18.49.2 18.50.0 to 18.50.2 18.51.0 to 18.51.2 18.52.0 to 18.52.2 18.53.0 to 18.53.2 18.54.0 to 18.54.2 18.55.0 to 18.55.2 18.56.0 to 18.56.2 18.57.0 to 18.57.2 18.58.0 to 18.58.2 18.59.0 to 18.59.2 18.60.0 to 18.60.2 18.61.0 to 18.61.2 18.62.0 to 18.62.2 18.63.0 to 18.63.2 18.64.0 to 18.64.2 18.65.0 to 18.65.2 18.66.0 to 18.66.2 18.67.0 to 18.67.2 18.68.0 to 18.68.2 18.69.0 to 18.69.2 18.70.0 to 18.70.2 18.71.0 to 18.71.2 18.72.0 to 18.72.2 18.73.0 to 18.73.2 18.74.0 to 18.74.2 18.75.0 to 18.75.2 18.76.0 to 18.76.2 1

Goal Reached Thanks to every supporter — we hit 100%!

GitLab CVE-2024-9385 Privilege Escalation via API Fix

More from this source