VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Apr 24, 2025· Updated Jun 17, 2026

CVE-2024-12244

CVE-2024-12244

Description

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1
  • GitLab Inc./GitLabllm-fuzzy6 versions
    from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1+ 5 more
    • (no CPE)range: from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 17.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=17.7.0,<17.9.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=17.7.0,<17.9.7
    • cpe:2.3:a:gitlab:gitlab:17.11.0:*:*:*:community:*:*:*
    • cpe:2.3:a:gitlab:gitlab:17.11.0:*:*:*:enterprise:*:*:*
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 17.7.0, < 17.11.1

Patches

Vulnerability mechanics

References

2

News mentions

1