VDB
CVE-2024-11669
CVE-2024-11669
PUBLISHED
CVSS 7.5 HIGH
An issue was discovered in GitLab CE/EE affecting all versions from 16.9.8 before 17.4.5, 17.5 before 17.5.3, and 17.6 before 17.6.1. Certain API endpoints could potentially allow unauthorized access to sensitive data due to overly broad application of token scopes.
EPSS 0.51% · 42.7th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.51%
42.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 17.6.0, 17.5.0, 16.9.8 |
| Bitnami | gitlab | 16.9.8, 17.5.0, 17.6.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Nov 26, 2024 PoC Published
- Nov 26, 2024 CVE Published
- Nov 27, 2024 EPSS Score
- Nov 27, 2024 Coalition ESS Score
- Dec 16, 2024 EPSS Score
- Dec 18, 2024 Coalition ESS Score
- Jan 3, 2025 EPSS Score
- Jan 21, 2025 EPSS Score
- Feb 8, 2025 EPSS Score
- Feb 26, 2025 EPSS Score
- Mar 12, 2025 Coalition ESS Score