CVE-2024-8977
Server-Side Request Forgery (SSRF) in GitLab
HIGH 8.1EPSS 0.6%
An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks.
- Affected
- GitLab
- CVSS v3.1 NVD
- 8.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N - CVSS v3.1 GITLAB
- 8.2 HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N - EPSS
- 0.55% chance of exploitation in the next 30 days, 45th percentile
- Published
- 2024-10-10