VDB
GCVE-110-NCSC-2024-373
GCVE-110-NCSC-2024-373
Advisory PublishedCVSS 4.0/10
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Weaknesses (CWE)
CWE-532Insertion of Sensitive Information into Log FileCWE-290Authentication Bypass by SpoofingCWE-267Privilege Defined With Unsafe ActionsCWE-863Incorrect AuthorizationCWE-862Missing AuthorizationCWE-209Generation of Error Message Containing Sensitive InformationCWE-497Exposure of Sensitive System Information to an Unauthorized Control SphereCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-918Server-Side Request Forgery (SSRF)CWE-270Privilege Context Switching ErrorCWE-601URL Redirection to Untrusted Site ('Open Redirect')CWE-424Improper Protection of Alternate PathCWE-840-CWE-1333Inefficient Regular Expression Complexity
Risk Scores
CVSS 3.1
4.0/10
Medium · CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| open_source | open_source_gitlab__17.1.7 | — | — |
| gitlab | gitlab | — | — |
| open_source | open_source_gitlab__17.3.2 | — | — |
| open_source | open_source_gitlab__17.2.5 | — | — |
Browse GCVE Records
72,921 records in the GCVE database · Updated July 15, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.