CVE-2024-12570

Summary

CVE-2024-12570 is a vulnerability affecting GitLab CE/EE versions 13.7 to 17.6.2, including 17.5 prior to 17.5.4. An attacker with a victim's `CI_JOB_TOKEN` may have gained unauthorized access to the victim's GitLab session token. This issue puts affected GitLab users at risk of unintended exposure of their tokens, potentially leading to unauthorized account access. This vulnerability has been addressed in the fixed versions mentioned above, and users are advised to upgrade as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.