Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2024-9633 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2024-9633

CVE-2024-9633

LOW3.1

Incorrect Ownership Assignment in GitLab

Published Nov 14, 2024

Modified 1 years ago

Details

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.3 before 17.4.2, all versions starting from 17.5 before 17.5.4, all versions starting from 17.6 before 17.6.2. This issue allows an attacker to create a group with a name matching an existing unique Pages domain, potentially leading to domain confusion attacks.

References

https://gitlab.com/gitlab-org/gitlab/-/issues/498257

https://hackerone.com/reports/2759470

https://www.cve.org/CVERecord?id=CVE-2024-9633

CVSS Analysis

CVSS v3.1

3.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

LowA:L

3.1/CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Weakness Type (CWE)

Other

Ecosystems

Timeline

PublishedNov 14, 2024

ModifiedDec 6, 2024