CVE-2024-5005
An issue has been discovered discovered in GitLab EE/CE affecting all versions starting from 11.4 before 17.2.9, all versions starting from 17.3 before 17.3.5, all versions starting from 17.4 before 17.4.2 It was possible for guest users to disclose project templates using the API.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- EPSS probability
- 0.40%
- CWE
- CWE-684
- Published
- 2024-10-11
- Last modified
- 2026-03-13
Affected products
- GitLab GitLab
- GitLab GitLab
- GitLab GitLab
Weakness type
Related vulnerabilities
- CVE-2026-79126 — Incorrect provision of specified functionality in Proxy in Google Chrome on on Windows prior to...
- CVE-2026-52735 — ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser
- CVE-2026-44597 — Tor before 0.4.9.7 has an out-of-bounds read when an END, a TRUNCATE, or a TRUNCATED cell lacks a...
- CVE-2026-40685 — In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a...
- CVE-2026-40684 — In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection...
- CVE-2026-42255 — Technitium DNS Server before 15.0 allows DNS traffic amplification via cyclic name server...
- CVE-2026-35381 — uutils coreutils cut Local Logic Error and Data Integrity Issue in Output Filtering
- CVE-2026-35379 — uutils coreutils tr Local Logic Error and Data Integrity Issue in Character Class Handling