VDB
CVE-2024-11931
CVE-2024-11931
PUBLISHED
An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.6.4, from 17.7 prior to 17.7.3, and from 17.8 prior to 17.8.1. Under certain conditions, it may have been possible for users with developer role to exfiltrate protected CI variables via CI lint.
EPSS 0.03% · 10.5th percentile
Risk Scores
EPSS Score
0.03%
10.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 17.0.0, 17.7.0, 17.8.0 |
| Bitnami | gitlab | 17.7.0, 17.8.0, 17.0.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Jan 22, 2025 PoC Published
- Jan 22, 2025 CVE Published
- Jan 24, 2025 EPSS Score
- Jan 24, 2025 PoC Published
- Jan 24, 2025 PoC Published
- Jan 24, 2025 PoC Published
- Feb 8, 2025 EPSS Score
- Feb 23, 2025 EPSS Score
- Mar 11, 2025 EPSS Score
- Mar 16, 2025 Coalition ESS Score
- Mar 26, 2025 EPSS Score