VULNERABILITY INTELLIGENCE

CVE-2024-5528

CVSS score5.4 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2025-02-05

Last modified2026-06-17

Description

An issue was discovered in GitLab CE/EE affecting all versions prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2, which allows a subdomain takeover in GitLab Pages.