← Database

CVE-2024-4011

LOW CVSS: 3.1 Published: 2024-06-27 Modified: 2026-06-17

Description

An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and starting from 17.1 prior to 17.1.1, which allows non-project member to promote key results to objectives.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-863, CWE-863

References