VYPR
← All advisories
Low severity3.7NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026

CVE-2024-9596

CVE-2024-9596

Description

An issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. It was possible for an unauthenticated attacker to determine the GitLab version number for a GitLab instance.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • GitLab Inc./GitLab3 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*+ 2 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=16.6.0,<17.2.9
    • (no CPE)range: 16.6 <= versions < 17.2.9, 17.3 < versions < 17.3.5, 17.4 < versions < 17.4.2
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 16.6
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 16.6.0, < 17.2.9
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: 16.6 <= versions < 17.2.9, 17.3 < versions < 17.3.5, 17.4 < versions < 17.4.2

Patches

Vulnerability mechanics

References

1

News mentions

1