VULNERABILITY INTELLIGENCE

CVE-2024-11931

CVSS score6.4 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2025-01-24
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Description

An issue has been discovered in GitLab CE/EE affecting all versions starting from 17.0 prior to 17.6.4, from 17.7 prior to 17.7.3, and from 17.8 prior to 17.8.1. Under certain conditions, it may have been possible for users with developer role to exfiltrate protected CI variables via CI lint.

Weakness classification

  • cve@gitlab.com: CWE-1220
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references