CVE-2024-5318

Summary

CVE-2024-5318 is a vulnerability affecting GitLab CE/EE versions 11.11 to 16.10.6, 16.11 to 16.11.3, and 17.0 to 17.0.1. This issue allows Guest users to access dependency lists of private projects, despite having no authorized access to the projects themselves. This vulnerability poses a risk to data confidentiality, as sensitive dependency information could be exposed. Organizations using the affected GitLab versions are urged to upgrade to the latest patch releases to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.