VDB
CVE-2024-4994
CVE-2024-4994
PUBLISHED
An issue has been discovered in GitLab CE/EE affecting all versions from 16.1.0 before 16.11.5, all versions starting from 17.0 before 17.0.3, all versions starting from 17.1.0 before 17.1.1 which allowed for a CSRF attack on GitLab's GraphQL API leading to the execution of arbitrary GraphQL mutations.
EPSS 0.09% · 26.1th percentile
Risk Scores
EPSS Score
0.09%
26.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 16.1.0, 17.0.0 |
| Bitnami | gitlab | 16.1.0, 17.0.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Jun 26, 2024 CVE Published
- Jun 28, 2024 PoC Published
- Jun 20, 2025 PoC Published
- Jun 20, 2025 PoC Published
- Jun 21, 2025 EPSS Score
- Jun 21, 2025 Coalition ESS Score
- Jun 23, 2025 Coalition ESS Score
- Jul 1, 2025 EPSS Score
- Jul 11, 2025 EPSS Score
- Jul 11, 2025 Coalition ESS Score
- Jul 21, 2025 EPSS Score