PoC Index

CVE-2024-12380

HIGH 7.5EPSS 0.6%

An issue was discovered in GitLab EE/CE affecting all versions starting from 11.5 before 17.7.7, all versions starting from 17.8 before 17.8.5, all versions starting from 17.9 before 17.9.2. Certain user inputs in repository mirroring settings could potentially expose sensitive authentication information.

CVSS v3.1
7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v3.1
4.4 MEDIUMCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS
0.55% chance of exploitation in the next 30 days, 44th percentile
Published
2025-03-13
Updated
2025-03-14

Proof-of-concept exploits (1)

References

Related