Unrated

Incorrect Provision of Specified Functionality in GitLab

CVE-2024-8974 First seen on SecPulse Sep 27, 2024

Original description The description as published by the source.

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package git://git@gitlab.com:gitlab-org/gitlab.git
report gitlab.com

Key facts

Severity: Unrated
Published: Sep 27, 2024
First seen on SecPulse: Sep 27, 2024
CWE: CWE-684

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:06