CVE-2024-7554CWE-200

Exposure of Sensitive Information to an Unauthorized Actor in GitLab

Medium · published August 8, 2024

CVSS v3.1
4.9
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9 before 17.0.6, all versions starting from 17.1 before 17.1.4, all versions starting from 17.2 before 17.2.2. Under certain conditions, access tokens may have been logged when an API request was made in a specific manner.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00403 · 33.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-08-08T10:30Z
EPSS history
Timeline
  • 08 AUG 10:30Z
    Exposure of Sensitive Information to an Unauthorized Actor in GitLab
    cvelistv5