CVE-2024-8647

Summary

CVE-2024-8647 is a vulnerability affecting various versions of GitLab, including those between 15.2 and 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior to 17.6.2. In self-hosted installations, this issue permits the leaking of the anti-CSRF token to external sites when Harbor integration is enabled. This potential security risk could allow unauthorized access to GitLab instances. Users are strongly encouraged to apply the relevant patches as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.