← Back

CVE-2024-5435

nvd nist
Published: Sep 12, 2024Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 15.10 before 17.1.7, all versions starting from 17.2 before 17.2.5, all versions starting from 17.3 before 17.3.2 will disclose user password from repository mirror configuration.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 15.10.0 to 17.1.7
Gitlab
From 17.2.0 to 17.2.5
Gitlab
From 17.3.0 to 17.3.2
Gitlab
From 15.10.0 to 17.1.7
Gitlab
From 17.2.0 to 17.2.5
Gitlab
From 17.3.0 to 17.3.2

Related CWEs

CWE-209
Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (3)

Source: cve@gitlab.com
Broken Link
Source: cve@gitlab.com
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.