VULNERABILITY INTELLIGENCE

CVE-2024-8977

CVSS score8.2 HIGH
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-10-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Description

An issue has been discovered in GitLab EE affecting all versions starting from 15.10 prior to 17.2.9, from 17.3 prior to 17.3.5, and from 17.4 prior to 17.4.2. Instances with Product Analytics Dashboard configured and enabled could be vulnerable to SSRF attacks.

Weakness classification

  • cve@gitlab.com: CWE-918
  • nvd@nist.gov: CWE-918

Primary references