CVE Radar Logo
CVERadar
CVE Radar Logo
CVERadar

CVE-2024-2743

Critical Severity
Gitlab
SVRS
79/100

CVSSv3
9.1/10

EPSS
0.00024/1

CVE-2024-2743: Vulnerability in GitLab-EE allows unauthorized modification of DAST scans and variable leakage. GitLab versions 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2 are affected. This flaw enables an attacker to bypass permission checks, potentially altering security scans without proper authorization, and exposing sensitive variables. The SVRS score of 79 indicates a high-risk vulnerability, close to critical levels, demanding prompt evaluation and patching. Successful exploitation could lead to data breaches and compromised security posture. Immediate action is needed to mitigate potential risks and maintain the integrity of GitLab environments using Dynamic Application Security Testing. Patching the affected GitLab instances is highly recommended.

In The Wild
CVSS:3.1
AV:N
AC:L
PR:N
UI:N
S:U
C:H
I:H
A:N
2024-09-12

2024-09-14

Indicators of Compromise

No IOCs found for this CVE

Exploits

No exploits found for this CVE

Enhance Your CVE Management with SOCRadar Vulnerability Intelligence
Get comprehensive CVE details, real-time notifications, and proactive threat management all in one platform.
CVE Details
Access comprehensive CVE information instantly
Real-time Tracking
Subscribe to CVEs and get instant updates
Exploit Analysis
Monitor related APT groups and threats
IOC Tracking
Analyze and track CVE-related IOCs

News

GitLab Critical Patch Release: 17.3.2, 17.2.5, 17.1.7
Ottilia Westerlund2025-04-01
GitLab Critical Patch Release: 17.3.2, 17.2.5, 17.1.7 | Today we are releasing versions 17.3.2, 17.2.5, 17.1.7 for GitLab Community Edition (CE) and Enterprise Edition (EE). These versions contain important bug and security fixes, and we strongly recommend that all self-managed GitLab installations be upgraded to one of these versions immediately. GitLab.com is already running the patched version. GitLab Dedicated customers do not need to take action. GitLab releases fixes for
news
gitlab.com
rss
forum

Social Media

CVE-2024-2743 (CVSS:9.1, CRITICAL) is Analyzed. An issue was discovered in GitLab-EE starting with version 13.3 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3...https://t.co/3LKuaIOeYE #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
0
0
0

Affected Software

Configuration 1
TypeVendorProduct
AppGitlabgitlab

References

ReferenceLink
[email protected]https://gitlab.com/gitlab-org/gitlab/-/issues/451014
[email protected]https://hackerone.com/reports/2411756

CWE Details

CWE IDCWE NameDescription
CWE-863Incorrect AuthorizationThe software performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.

CVE Radar

Real-time CVE Intelligence & Vulnerability Management Platform

CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.

Get Free Vulnerability Intelligence AccessAccess real-time CVE monitoring, exploit analysis, and threat intelligence