VDB

CVE-2024-8402

CVE-2024-8402 PUBLISHED

An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. An input validation issue in the Google Cloud IAM integration feature could have enabled a Maintainer to introduce malicious code.

EPSS 0.09% · 25.8th percentile

Risk Scores

EPSS Score
0.09%
25.8th percentile

Affected Products

VendorProductVersions
Bitnamigitlab17.2.0
Bitnamigitlab17.2.0

Timeline

  • Jan 21, 1970 Security Advisory
  • Mar 12, 2025 CVE Published
  • Mar 13, 2025 Coalition ESS Score
  • Mar 14, 2025 EPSS Score
  • Mar 27, 2025 Coalition ESS Score
  • Mar 28, 2025 EPSS Score
  • Mar 29, 2025 Coalition ESS Score
  • Apr 10, 2025 EPSS Score
  • Apr 24, 2025 EPSS Score
  • May 7, 2025 EPSS Score
  • May 21, 2025 EPSS Score
  • Jun 3, 2025 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›