CVE-2024-8116

Summary

CVE-2024-8116 is a vulnerability affecting GitLab CE and EE versions prior to 17.4.6, 17.5.4, and 17.6.2. Under specific conditions, an unauthorized user can execute a GraphQL query to gain access to branch names, potentially compromising protected information. This issue poses a serious risk to the confidentiality of project data in GitLab environments. Users are advised to upgrade to the latest version as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.