VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Mar 13, 2025· Updated Jun 17, 2026

CVE-2024-12380

CVE-2024-12380

Description

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.

Affected products

5
  • GitLab Inc./GitLabv53 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 11.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=11.5.0,<17.7.7
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=11.5.0,<17.7.7
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: starting from 11.5 before 17.7.7, starting from 17.8 before 17.8.5, starting from 17.9 before 17.9.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 11.5.0, < 17.9.2

Patches

Vulnerability mechanics

References

2

News mentions

1