CVE-2024-4660 in Enterprise Edition

Tóm tắt

Bởi MITRE • 12/09/2024

An issue has been discovered in GitLab EE affecting all versions starting from 11.2 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2. It was possible for a guest to read the source code of a private project by using group templates.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• chịu trách nhiệm: GitLab
• Đặt trước: 08/05/2024
• Tiết lộ: 12/09/2024
• Kiểm duyệt: được chấp nhận
• mục: VDB-277307
• CPE: sẵn sàng
• CWE: CWE-862 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.00489
• KEV: không
• Các hoạt động: rất thấp
• ngành: Pharma, Chemical, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-4660
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-4660
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-4660/