CVE-2024-10240CWE-497

Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab

Medium · published November 26, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE affecting all versions starting from 17.3 before 17.3.7, all versions starting from 17.4 before 17.4.4, all versions starting from 17.5 before 17.5.2 in which an unauthenticated user may be able to read some information about an MR in a private project, under certain circumstances.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00558 · 45.7th percentile
Weakness
CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published
2024-11-26T19:22Z
EPSS history
Timeline
  • 26 NOV 19:22Z
    Exposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
    cvelistv5