VYPR
← All advisories
Low severity2.6NVD Advisory· Published Jul 24, 2024· Updated Jun 17, 2026

CVE-2024-7060

CVE-2024-7060

Description

An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows unauthorized users to view the resultant export.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GitLab Inc./GitLabv54 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.4
    • (no CPE)range: from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: >=15.4,<17.0.5
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.4,<17.0.5
  • GitLab Inc./GitLab EE and CEllm-fuzzy
    Range: from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.4.0, < 17.0.5

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.