VDB
BIT-GITLAB-2024-12380
BIT-GITLAB-2024-12380
PUBLISHED
CVSS 4.400000095367432 MEDIUM
An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GitLab | GitLab | 11.5, 17.8, 17.9 |
Timeline
- Mar 13, 2025 CVE Published
- Mar 13, 2025 PoC Published
- Mar 14, 2025 PoC Published
- Aug 13, 2025 PoC Published
References
- GitLab Issue #508557 issue
- HackerOne Bug Bounty Report #2868951 exploit