← Back

CVE-2024-7586

nvd nist
Published: Jun 20, 2025Modified: Aug 12, 2025

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials.

Affected (6)

Products: Gitlab: Gitlab
Gitlab
1 product
Gitlab
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Gitlab
Gitlab
From 17.0.0 to 17.0.6
Gitlab
From 17.1.0 to 17.1.4
Gitlab
From 17.2.0 to 17.2.2
Gitlab
From 17.0.0 to 17.0.6
Gitlab
From 17.1.0 to 17.1.4
Gitlab
From 17.2.0 to 17.2.2

Related CWEs

CWE-532
Insertion of Sensitive Information into Log File
Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (1)

Source: cve@gitlab.com
Broken Link

Timeline

No history available yet.