VDB
CVE-2024-8647
CVE-2024-8647
PUBLISHED
CVSS 5.400000095367432 MEDIUM
An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled.
EPSS 0.43% · 37.4th percentile
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.43%
37.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 15.2.0, 17.5.0, 17.6.0 |
| Bitnami | gitlab | 15.2.0, 17.5.0, 17.6.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Dec 10, 2024 CVE Published
- Dec 11, 2024 PoC Published
- Dec 12, 2024 PoC Published
- Dec 13, 2024 EPSS Score
- Dec 31, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 4, 2025 EPSS Score
- Feb 21, 2025 EPSS Score
- Mar 11, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Apr 7, 2025 Coalition ESS Score