CVE Vulnerabilities

CVE-2024-7091

Published: Jul 24, 2024 | Modified: Sep 05, 2024
CVSS 3.x
5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.6 prior to 17.0.5, starting from 17.1 prior to 17.1.3, and starting from 17.2 prior to 17.2.1 where it was possible to disclose limited information of an exported group or project to another user.

Affected Software

Name Vendor Start Version End Version
Gitlab Gitlab 15.6 (including) 17.0.5 (excluding)
Gitlab Gitlab 17.1 (including) 17.1.3 (excluding)
Gitlab Gitlab 17.2 (including) 17.2.1 (excluding)

References