CVE-2024-9870CWE-441

Unintended Proxy or Intermediary ('Confused Deputy') in GitLab

Medium · published February 12, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
32.4
In the wild
Unconfirmed
What it is

An external service interaction vulnerability in GitLab EE affecting all versions from 15.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send requests from the GitLab server to unintended services.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00393 · 32.4th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2025-02-12T15:31Z
EPSS history
Timeline
  • 12 FEB 15:31Z
    Unintended Proxy or Intermediary ('Confused Deputy') in GitLab
    cvelistv5