CVE-2024-0402

Summary

CVE-2024-0402 is a vulnerability affecting GitLab CE/EE versions 16.0 to 16.6.6, 16.7 to 16.7.4, and 16.8 to 16.8.1. It permits authenticated users to write files to arbitrary locations on GitLab servers while creating workspaces, posing a potential security risk. This issue can lead to unintended file modifications, unauthorized access, or other security breaches. Users are encouraged to upgrade their GitLab installations to the latest patched versions to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.