CVE-2024-3303 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior…
Medium CVSS: 6.4

CVE-2024-3303

An issue was discovered in GitLab EE affecting all versions starting from 16.0 prior to 17.6.5, starting from 17.7 prior to 17.7.4, and starting from 17.8 prior to 17.8.2, which allows an attacker to exfiltrate contents of a private issue using prompt injection.
Vendor
Gitlab
Product
Gitlab
CWE
NVD-CWE-noinfo
Yayın Tarihi
2025-02-13 09:15:09
Güncelleme
2025-08-06 18:32:16
Source Identifier
cve@gitlab.com
KEV Date Added
-

Kategoriler

NVD-CWE-noinfo Gitlab MEDIUM Gitlab 2025

Referanslar

https://gitlab.com/gitlab-org/gitlab/-/issues/454460 https://hackerone.com/reports/2418620