VULNERABILITY INTELLIGENCE

CVE-2024-4283

CVSS score6.4 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2024-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Description

An issue has been discovered in GitLab EE affecting all versions starting from 11.1 before 17.1.7, 17.2 before 17.2.5, and 17.3 before 17.3.2. Under certain conditions an open redirect vulnerability could allow for an account takeover by breaking the OAuth flow.

Weakness classification

  • cve@gitlab.com: CWE-601
  • nvd@nist.gov: CWE-601

Primary references