VDB
BIT-GITLAB-2024-5318
BIT-GITLAB-2024-5318
PUBLISHED
CVSS 4 MEDIUM
An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.11 prior to 16.10.6, starting from 16.11 prior to 16.11.3, and starting from 17.0 prior to 17.0.1. A Guest user can view dependency lists of private projects through job artifacts.
Risk Scores
CVSS 3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| GitLab | GitLab | 11.11, 16.11, 17.0 |
Timeline
- May 24, 2024 CVE Published
- Oct 3, 2024 CVE Updated
References
- GitLab Issue #427526 issue
- HackerOne Bug Bounty Report #2189464 exploit