CVE-2024-0231
Gitlab
CVE-2024-0231 is a resource misdirection vulnerability in GitLab that could allow attackers to manipulate repository imports. Specifically, versions of GitLab CE/EE before 17.0.5, 17.1.3, and 17.2.1 are affected. An attacker can craft a malicious repository import to misdirect commits, potentially leading to code injection or other unauthorized actions. While the CVSS score is relatively low at 2.7, indicating low severity, organizations using GitLab should still investigate due to the 'In The Wild' tag. SOCRadar's SVRS of 30 suggests the real-world risk may be higher than the CVSS score indicates. This vulnerability, categorized as CWE-74 (Improper Neutralization of Special Elements used in an Output Command), warrants patching and careful review of repository import processes to prevent exploitation and maintain code integrity. It is significant because even seemingly minor vulnerabilities can be chained together for larger attacks.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.