CVE-2024-8650

Summary

CVE-2024-8650 is a vulnerability affecting GitLab CE/EE versions 15.0 to 17.6.2, including 17.4.6 and 17.5.4. This issue permits non-member users to access unresolved threads marked as internal notes in public projects merge requests. This involves a bypass of the intended access control, potentially exposing sensitive information. The vulnerability could lead to unintended disclosures, compromising the security and confidentiality of GitLab users' merge request data.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.