CVE-2024-7554

Summary

CVE-2024-7554 is a vulnerability affecting GitLab CE/EE versions 13.9 before 17.0.6, 17.1 before 17.1.4, and 17.2 before 17.2.2. This issue allows an attacker to potentially log access tokens when a specific API request is made under certain conditions, posing a significant threat to unauthorized access and data breaches. Users are strongly advised to update their GitLab installations to the latest patched versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.