VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 24, 2024· Updated Sep 17, 2024

Exposure of Sensitive Information to an Unauthorized Actor in GitLab

CVE-2024-7060

Description

An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows unauthorized users to view the resultant export.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.4
    • (no CPE)range: >=15.4, <17.0.5, >=17.1, <17.1.3, >=17.2, <17.2.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.4.0, < 17.0.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.