Non évaluée

Insertion of Sensitive Information into Log File in GitLab

CVE-2024-7586 Première détection SecPulse Jun 20, 2025

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in GitLab EE affecting all versions starting from 17.0 prior to 17.0.6, starting from 17.1 prior to 17.1.4, and starting from 17.2 prior to 17.2.2, where webhook deletion audit log preserved auth credentials.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com

Faits clés

Gravité: Non évaluée
Publication: Jun 20, 2025
Première détection SecPulse: Jun 20, 2025
CWE: CWE-532

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:05