CVE-2024-9623

Summary

CVE-2024-9623 is a vulnerability affecting GitLab Community Edition (CE) and Enterprise Edition (EE) versions 8.16 and later, prior to 17.2.9, 17.3 and later prior to 17.3.5, and 17.4 and later prior to 17.4.2. This issue enables deploy keys to push to archived repositories, posing a risk for unauthorized access and data manipulation. Attackers can exploit this vulnerability by using deploy keys to bypass repository protection rules and push malicious code, potentially leading to security breaches and data loss. Users are strongly advised to upgrade to the latest patched versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.