NetSight
medium4.4

CVE-2024-8266

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a p…

Impact

An issue was discovered in GitLab CE/EE affecting all versions starting from 17.1 prior to 17.6.0, which allows an attacker with maintainer role to trigger a pipeline as project owner under certain circumstances.

Affected products

VendorProductAffected versions
GitlabGitlab
from 17.1.0 before 17.6.0

Weakness classification

References