VYPR
← All advisories
High severity8.2NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026

CVE-2024-8977

CVE-2024-8977

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.10
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.10,<17.2.9
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: 15.10 <= v < 17.2.9, 17.3 <= v < 17.3.5, 17.4 <= v < 17.4.2
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.10.0, < 17.2.9

Patches

Vulnerability mechanics

References

2

News mentions

1