VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 26, 2024· Updated Sep 27, 2024

Incorrect Provision of Specified Functionality in GitLab

CVE-2024-8974

Description

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."

Affected products

3
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.6
    • (no CPE)range: >=15.6, <17.2.8 | >=17.3, <17.3.4 | >=17.4, <17.4.1
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.6.0, < 17.2.8

Patches

Vulnerability mechanics

References

1

News mentions

1