CVE-2024-9596

EPSS 0.1%
Published 10.10.2024 10:15:08
Last modified 16.10.2024 17:00:19
Source cve@gitlab.com
Teams watchlist Login
Open Login

An issue has been discovered in GitLab EE affecting all versions starting from 16.6 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. It was possible for an unauthenticated attacker to determine the GitLab version number for a GitLab instance.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Gitlab ≫ Gitlab SwEditionenterprise Version >= 16.6.0 < 17.2.9

Gitlab ≫ Gitlab SwEditionenterprise Version >= 17.3.0 < 17.3.5

Gitlab ≫ Gitlab SwEditionenterprise Version >= 17.4.0 < 17.4.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.1%	0.281

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cve@gitlab.com	3.7	2.2	1.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-540 Inclusion of Sensitive Information in Source Code

Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

https://gitlab.com/gitlab-org/gitlab/-/issues/493355

Broken Link

https://nvd.nist.gov/vuln/detail/CVE-2024-9596

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-9596

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-9596

EUVD