CVE-2024-7060CWE-200

Exposure of Sensitive Information to an Unauthorized Actor in GitLab

Low · published July 24, 2024

CVSS v3.1
2.6
EPSS
0%
Percentile
22.1
In the wild
Unconfirmed
What it is

An information disclosure vulnerability in GitLab CE/EE in project/group exports affecting all versions from 15.4 prior to 17.0.5, 17.1 prior to 17.1.3, and 17.2 prior to 17.2.1 allows unauthorized users to view the resultant export.

The record
Technical detail
CVSS v3.1
2.6 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00305 · 22.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-07-24T22:07Z
EPSS history
Timeline
  • 24 JUL 22:07Z
    Exposure of Sensitive Information to an Unauthorized Actor in GitLab
    cvelistv5