CVE-2024-8647

CVSS V2 None CVSS V3 None
Description
An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. On self hosted installs, it was possible to leak the anti-CSRF-token to an external site while the Harbor integration was enabled.
Overview
  • CVE ID
  • CVE-2024-8647
  • Assigner
  • GitLab
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-12T12:02:54.888Z
  • Last Modified Date
  • 2024-12-12T15:44:19.905Z
References
Reference URL Reference Tags
https://gitlab.com/gitlab-org/gitlab/-/issues/486051 issue-tracking permissions-required
https://hackerone.com/reports/2666341 technical-description exploit permissions-required
History
Created Old Value New Value Data Type Notes
2024-12-13 13:12:56 Added to TrackCVE