VDB

CVE-2024-5528

CVE-2024-5528 PUBLISHED

An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.

EPSS 0.07% · 21.2th percentile

Risk Scores

EPSS Score
0.07%
21.2th percentile

Affected Products

VendorProductVersions
Bitnamigitlab0
Bitnamigitlab0

Timeline

  • Jan 21, 1970 Security Advisory
  • Jul 10, 2024 CVE Published
  • Feb 5, 2025 Coalition ESS Score
  • Feb 5, 2025 Coalition ESS Score
  • Feb 5, 2025 PoC Published
  • Feb 5, 2025 PoC Published
  • Feb 5, 2025 PoC Published
  • Feb 6, 2025 EPSS Score
  • Feb 6, 2025 PoC Published
  • Feb 21, 2025 EPSS Score
  • Mar 8, 2025 EPSS Score
  • Mar 22, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›