CVE-2024-9773

Summary

CVE-2024-9773 is a vulnerability affecting GitLab Enterprise Edition (EE). Affected versions include those starting from 14.9 before 17.8.6, 17.9 before 17.8.3, and all versions of 17.10 before 17.10.1. This issue involves an input validation problem in the Harbor registry integration. A maintainer could exploit this flaw to introduce malicious code into CLI commands displayed in the GitLab user interface. Successful exploitation could potentially lead to unintended and potentially harmful actions within the GitLab environment. Users are urged to upgrade to the respective patched versions as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.