Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-9387

URL Redirection to Untrusted Site ('Open Redirect') in GitLab

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

An issue was discovered in GitLab CE/EE affecting all versions from 11.8 before 17.4.6, 17.5 before 17.5.4, and 17.6 before 17.6.2. An attacker could potentially perform an open redirect against a given releases API endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

GitLab GitLab

Default version status: unaffected

  • 11.8 to < 17.4.6affected
  • 17.5 to < 17.5.4affected
  • 17.6 to < 17.6.2affected

References