CVE-2024-11668

Summary

CVE-2024-11668 is a vulnerability affecting GitLab CE/EE versions 16.11 to 17.6.1, 17.5.3, and 17.4.5. This issue permits unauthorized access through long-lived connections that could bypass authentication controls, exposing streaming results. GitLab users are urged to update their systems to the latest versions to mitigate this risk. Unauthenticated users may potentially gain unauthorized access if a long-lived connection is not properly secured. This vulnerability could have significant implications for organizations reliant on GitLab for secure software development and collaboration.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.