CVE-2024-8402

PoC —

CVSS 3.1

7.4 high

EPSS

<1%p15

Published

Mar 13, 2025 (Mar 13, 2025)

Modified

Jun 17, 2026

Description

An issue was discovered in GitLab EE affecting all versions starting from 17.2 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. An input validation issue in the Google Cloud IAM integration feature could have enabled a Maintainer to introduce malicious code.

Vendors: gitlab
Products: gitlab
Weakness: CWE-77
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.