CVE-2024-12619

Medium

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1,…

GitLab·CWE-1220·Published 2025-03-28

CVSS

6.5

EPSS

0.00

KEV

Exploits

cve.orgen

212 chars

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects.

NVDen

212 chars

NVDes

255 chars

Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones desde la 16.0 hasta la 17.8.6, la 17.9 hasta la 17.9.3 y la 17.10 hasta la 17.10.1, lo que permite que los usuarios internos obtengan acceso no autorizado a proyectos internos.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	5.2	—	—	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N
3.1	Secondary	NVD	5.2	0.9	4.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N