CVE-2024-4612CWE-601

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Medium · published September 12, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab EE affecting all versions starting from 12.9 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2024-09-12T16:57Z
EPSS history
Timeline
  • 12 SEP 16:57Z
    URL Redirection to Untrusted Site ('Open Redirect') in GitLab
    cvelistv5