CVE-2024-6446

Business Logic Errors in GitLab

Low · published September 12, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab affecting all versions starting from 17.1 to 17.1.7, 17.2 prior to 17.2.5 and 17.3 prior to 17.3.2. A crafted URL could be used to trick a victim to trust an attacker controlled application.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.0th percentile
Published
2024-09-12T16:56Z
EPSS history
Timeline
  • 12 SEP 16:56Z
    Business Logic Errors in GitLab
    cvelistv5