VDB
CVE-2024-9164
CVE-2024-9164
PUBLISHED
An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches.
EPSS 0.15% · 35.5th percentile
Risk Scores
EPSS Score
0.15%
35.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | gitlab | 12.5.0, 17.3.0, 17.4.0 |
| Bitnami | gitlab | 12.5.0, 17.4.0, 17.3.0 |
Timeline
- Jan 21, 1970 Security Advisory
- Oct 9, 2024 CVE Published
- Oct 12, 2024 EPSS Score
- Oct 14, 2024 Coalition ESS Score
- Oct 16, 2024 Coalition ESS Score
- Oct 31, 2024 EPSS Score
- Nov 19, 2024 EPSS Score
- Dec 8, 2024 EPSS Score
- Dec 27, 2024 EPSS Score
- Jan 15, 2025 EPSS Score
- Feb 3, 2025 EPSS Score
- Feb 21, 2025 EPSS Score