VDB
CVE-2024-11274
CVE-2024-11274
PUBLISHED
CVSS 8.699999809265137 HIGH
An issue was discovered in GitLab CE/EE affecting all versions starting from 16.1 prior to 17.4.6, starting from 17.5 prior to 17.5.4, and starting from 17.6 prior to 17.6.2, injection of NEL headers in k8s proxy response could lead to session data exfiltration.
EPSS 0.46% · 39.1th percentile
Risk Scores
CVSS 3.1
8.699999809265137
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
EPSS Score
0.46%
39.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.1.0, 17.5.0, 17.6.0 |
| Bitnami | gitlab | 16.1.0, 17.6.0, 17.5.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Dec 10, 2024 CVE Published
- Dec 11, 2024 PoC Published
- Dec 12, 2024 CVE Updated
- Dec 13, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 3, 2025 EPSS Score
- Feb 21, 2025 EPSS Score
- Mar 10, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Apr 6, 2025 Coalition ESS Score