BIT-gitlab-2024-11129

vendorUSosv

Generation of Error Message Containing Sensitive Information in GitLab

view advisory published 2025-04-12Licence: per source

An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term."

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-11129US	high7.5	0.37% (31st)	—	2025-04-10
An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted s…

references

External citations — patches, advisories, analysis.

https://gitlab.com/gitlab-org/gitlab/-/issues/503722WEB
https://hackerone.com/reports/2717400WEB
https://nvd.nist.gov/vuln/detail/CVE-2024-11129WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan