An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://gitlab.com/gitlab-org/gitlab/-/issues/508046 | Exploit Issue Tracking |
| https://hackerone.com/reports/2862754 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
08 Aug 2025, 16:54
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gitlab gitlab
Gitlab |
|
| References | () https://hackerone.com/reports/2862754 - Permissions Required | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/508046 - Exploit, Issue Tracking | |
| CPE | cpe:2.3:a:gitlab:gitlab:17.11.0:*:*:*:enterprise:*:*:* cpe:2.3:a:gitlab:gitlab:17.11.0:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
24 Apr 2025, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-24 08:15
Updated : 2025-08-08 16:54
NVD link : CVE-2024-12244
Mitre link : CVE-2024-12244
JSON object : View
Products Affected
gitlab
- gitlab
CWE
CWE-862
Missing Authorization