CVE-2024-12244

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p23

Published

Apr 24, 2025 (Apr 24, 2025)

Modified

Jun 17, 2026

Description

An issue has been discovered in access controls could allow users to view certain restricted project information even when related features are disabled in GitLab EE, affecting all versions from 17.7 prior to 17.9.7, 17.10 prior to 17.10.5, and 17.11 prior to 17.11.1.

Vendors: gitlab
Products: gitlab
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.