VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jun 12, 2025· Updated Jun 17, 2026

CVE-2024-9512

CVE-2024-9512

Description

An issue has been discovered in GitLab EE affecting all versions prior to 17.10.8, 17.11 prior to 17.11.4, and 18.0 prior to 18.0.2. It may have been possible for private repository to be cloned in case of race condition when a secondary node is out of sync.

Affected products

5
  • osv-coords
    pkg:bitnami/gitlab
    Range: < 18.0.2
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*range: <17.10.8
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: <17.10.8
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 0
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: <17.10.8, <17.11.4, <18.0.2

Patches

Vulnerability mechanics

References

2

News mentions

1