VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 12, 2025· Updated Jun 17, 2026

CVE-2024-9870

CVE-2024-9870

Description

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • osv-coords
    pkg:bitnami/gitlab
    Range: >= 15.11.0, < 17.8.2
  • GitLab Inc./gitlab-org/gitlab-eellm-fuzzy
    Range: from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2
  • GitLab Inc./GitLabv52 versions
    cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:*:*:*:*range: 15.11
    • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*range: >=15.11.0,<17.6.5

Patches

Vulnerability mechanics

References

2

News mentions

1