← Database

CVE-2024-8311

MEDIUM CVSS: 6.5 Published: 2024-09-12 Modified: 2026-06-17

Description

An issue was discovered with pipeline execution policies in GitLab EE affecting all versions from 17.2 prior to 17.2.5, 17.3 prior to 17.3.2 which allows authenticated users to bypass variable overwrite protection via inclusion of a CI/CD template.

Affected Platforms

Gitlab Gitlab

Weakness Type

CWE-424, NVD-CWE-noinfo

References