CVE-2024-12292

CVSS 3.1 Score 4 of 10 (medium)

Details

Published Dec 12, 2024

CWE ID 532

Summary

CVE-2024-12292: A vulnerability was discovered in GitLab CE/EE affecting multiple versions. Sensitive information transmitted via GraphQL mutations could be stored in GraphQL logs for versions 11.0-17.4.6, 17.5-17.5.4, and 17.6-17.6.2. This issue poses a risk of data exposure through log access, making it necessary for users to upgrade to the patched versions as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

GitLab

Affected Vendors

GitLab Inc.

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/1S8l2J
https://www.cve.org/CVERecord?id=CVE-2024-12292
https://nvd.nist.gov/vuln/detail/CVE-2024-12292

Back to Vulnerability Database