CVE-2024-10043

Published December 12th, 2024

View on NVD ↗

CVSS v3

3.1

LOW

CVSS v2

N/A

Affected

PROJECT

Description

An issue has been discovered in GitLab EE affecting all versions starting from 14.3 before 17.4.6, all versions starting from 17.5 before 17.5.4 all versions starting from 17.6 before 17.6.2, that allows group users to view confidential incident title through the Wiki History Diff feature, potentially leading to information disclosure.

gitlab-org/gitlab

GitLab is the open-source DevSecOps platform that provides a complete software development lifecycle toolchain including source control, CI/CD, security scanning, and project management in a single application.

GitLab

6.06K