CVE-2024-3127: 
GitLab vulnerability analysis and mitigation

An issue has been discovered in GitLab Enterprise Edition (EE) affecting all versions starting from 12.5 before 17.1.6, all versions starting from 17.2 before 17.2.4, and all versions starting from 17.3 before 17.3.1. The vulnerability allows unauthorized users to bypass IP restrictions for groups through GraphQL, enabling them to perform certain actions at the group level (GitLab Release, NVD).

The vulnerability is classified with a CVSS v3.1 base score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. The issue specifically involves the GraphQL API interface where IP restrictions set at the group level can be circumvented, allowing unauthorized actions despite IP-based access controls being in place (NVD).

When exploited, this vulnerability allows users from blocked IP addresses to perform certain group-level actions through GraphQL API calls, effectively bypassing the intended IP-based access restrictions. This compromises the effectiveness of group-level security controls that are meant to restrict access based on IP addresses (GitLab Issue).

The vulnerability has been patched in GitLab versions 17.1.6, 17.2.4, and 17.3.1. Organizations are strongly recommended to upgrade to these or newer versions immediately. GitLab.com has already been updated with the patched version (GitLab Release).