CVE-2024-8641
Published: 12 September 2024
Summary
CVE-2024-8641 is a medium-severity Privilege Context Switching Error (CWE-270) vulnerability in Gitlab Gitlab. Its CVSS base score is 6.7 (Medium).
Operationally, ranked at the 18.5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-49319
Vulnerability details
An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN…
more
to obtain a GitLab session token belonging to the victim.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.