CVE-2024-3303

Summary

CVE-2024-3303 is a vulnerability affecting GitLab Enterprise Edition (EE). Versions 16.0 to 17.6.5, 17.7 to 17.7.4, and 17.8 to 17.8.2 are all impacted. This issue enables an attacker to inject prompts and exfiltrate the contents of private issues. This vulnerability poses a significant risk to confidential information within the affected GitLab installations. Users are strongly advised to upgrade to the relevant patched versions as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.