Vulnerability Details CVE-2024-8311
An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.8%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-8311
-
cpe:2.3:a:gitlab:gitlab:17.2.0
-
cpe:2.3:a:gitlab:gitlab:17.2.1
-
cpe:2.3:a:gitlab:gitlab:17.2.2
-
cpe:2.3:a:gitlab:gitlab:17.2.3
-
cpe:2.3:a:gitlab:gitlab:17.2.4
-
cpe:2.3:a:gitlab:gitlab:17.3.0
-
cpe:2.3:a:gitlab:gitlab:17.3.1