CVE-2024-7060

Summary

CVE-2024-7060 is an information disclosure vulnerability affecting various versions of GitLab CE/EE. Prior to the releases of 17.0.5, 17.1.3, and 17.2.1, unauthorized users could exploit this issue during project/group exports. As a result, sensitive information could be exposed and viewed by unintended recipients. This vulnerability poses a significant risk to data confidentiality. Users are strongly urged to update their GitLab installations to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.