CVE-2024-8974

—

CVSS 3.1

4.3 medium

EPSS

<1%p22

Published

Sep 26, 2024 (Sep 26, 2024)

Modified

Jun 17, 2026

Description

Information disclosure in Gitlab EE/CE affecting all versions from 15.6 prior to 17.2.8, 17.3 prior to 17.3.4, and 17.4 prior to 17.4.1 in specific conditions it was possible to disclose to an unauthorised user the path of a private project."

Vendors: gitlab
Products: gitlab
Weakness: CWE-684, CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.