An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 prior to 16.9.7, starting from 16.10 prior to 16.10.5, and starting from 16.11 prior to 16.11.2. It was possible to disclose via the UI the confidential issues title and description from a public project to unauthorised instance users.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://about.gitlab.com/releases/2024/05/08/patch-release-gitlab-16-11-2-released/ | Release Notes |
| https://gitlab.com/gitlab-org/gitlab/-/issues/457140 | Broken Link |
| https://hackerone.com/reports/2470939 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
06 Aug 2025, 18:59
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://about.gitlab.com/releases/2024/05/08/patch-release-gitlab-16-11-2-released/ - Release Notes | |
| References | () https://hackerone.com/reports/2470939 - Permissions Required | |
| References | () https://gitlab.com/gitlab-org/gitlab/-/issues/457140 - Broken Link | |
| CPE | cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:* cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* |
|
| First Time |
Gitlab gitlab
Gitlab |
05 Feb 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CWE |
05 Feb 2025, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-05 12:15
Updated : 2025-08-06 18:59
NVD link : CVE-2024-3976
Mitre link : CVE-2024-3976
JSON object : View
Products Affected
gitlab
- gitlab
CWE
No CWE.