CVE-2024-4283CWE-601

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Medium · published September 16, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-09-16T21:34Z
EPSS history
Timeline
  • 16 SEP 21:34Z
    URL Redirection to Untrusted Site ('Open Redirect') in GitLab
    cvelistv5