ANCHORE-2024-12380

ANCHORE-2024-12380 PUBLISHED

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.

Affected Products

Vendor	Product	Versions
GitLab	GitLab Enterprise	11.5, 17.8, 17.9
GitLab	GitLab	17.8, 17.8, 17.9

Timeline

Mar 13, 2025 CVE Published

References

https://gitlab.com/gitlab-org/gitlab/-/issues/508557 url
https://hackerone.com/reports/2868951 url

Open in Interactive Console →