CVE-2024-12431

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects.

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2025-01-08

Updated

2025-02-12

Proof-of-concept exploits (1)

• https://hackerone.com/reports/2877710

References

• CVE Record
• NVD entry

Related

• CVE-2024-1243
• CVE-2024-12436
• CVE-2024-12404
• CVE-2024-1247
• CVE-2024-12400
• CVE-2024-12471