CVE-2024-4660 in Enterprise Edition

Résumé

par MITRE • 12/09/2024

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: GitLab
• Réserver: 08/05/2024
• Divulgation: 12/09/2024
• Modérer: accepté
• Entrée: VDB-277307
• CPE: prêt
• CWE: CWE-862 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.00489
• KEV: non
• Activités: très faible
• Secteur: Insurance, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-4660
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-4660
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-4660/