GitLab Product Security Update Advisory (CVE-2024-7102)
Overview
We have released security updates to fix vulnerabilities in GitLab products. Users of affected products are advised to update to the latest version.
Affected Products
CVE-2024-7102
- GitLab CE/EE versions: 16.4 or later and at least prior to 17.5.0
Resolved Vulnerabilities
Vulnerability that allows an attacker to run a pipeline with the privileges of another user (CVE-2024-7102)
Vulnerability Patches
Vulnerability patches have been made available in the latest updates. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.
CVE-2024-7102
- GitLab CE/EE version: 17.5.0 or at least
References
[1] CVE-2024-7102 Detail